Milind Vyas

EXECUTIVE SUMMARY

Results-driven Chief Information Security Officer &

• Enterprise Security Leader with 20 years of experience steering Information Security, IT Infrastructure, Governance, Risk &

• Compliance (GRC), Cloud Security, and Incident Response across multi-site manufacturing, travel &

• BFSI enterprises. Proven track record of aligning cybersecurity frameworks with core business objectives, delivering risk visibility, and establishing enterprise resilience across 10+ plants and 3,000+ users. Combines executive-level governance expertise (ISO 27001, ITGC, DPDPA) with deep technical mastery in Zero Trust (Zscaler), SIEM (Sentinel &

• Splunk), EDR (Defender &

• CrowdStrike), and Vulnerability Management (Qualys). Recognized for transforming compliance operations into strategic business enablers.

CORE COMPETENCIES & EXPERTISE

▪ Executive Leadership & Strategy: Cybersecurity Strategy, Enterprise Risk Management (ERM), Security ROI, Budget & Resource Management

▪ Governance, Risk & Compliance (GRC): ISO 27001 (ISMS), ISO 22301 (BCMS), Data Privacy (DPDPA & GDPR), IT General Controls (ITGC) & Regulatory Audits

▪ Security Operations & Architecture: Zero Trust Architecture (Zscaler ZIA/ZPA), EDR (CrowdStrike, MS Defender), Cloud Security (CSPM/Cloud Neeti), SIEM & Threat Monitoring (MS Sentinel), Qualys VMDR & TruRisk,

▪ IT Infrastructure: Network Architecture, Azure AD/ Entra ID, Microsoft Intune, Microsoft Purview, Sectigo Certificate Manager, Email flow Architecture

Grasim Industries Limited (Aditya Birla Group) | Senior General Manager – Information Security Lead (CISO) for Pulp & Fibre Business

Oct 2022 – Present

Mumbai, India

Key Recognition: Awarded Fibre IconX 2025 Dynamic Achiever & Nominated for Aditya Birla Group Chairman's Award 2025.

• Enterprise Executive Scope: Serve as Chief Information Security Officer for the Pulp & Fibre Business, spearheading information security strategy, governance, and risk posture across 10 manufacturing plants and 3,000+ enterprise users.
• Governance: Deliver regular cyber risk posture assessments and compliance reports to leadership and audit committees, aligning cybersecurity investments directly with enterprise business continuity.
• OT Security: Performed Risk Assessment, Designed IT-OT convergence landscape network architecture aligning to Perdue model for the Unit for implementation for Secure Remote Access & Historian Systems.
• Zero Trust & Cloud Security: Architected and deployed Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) across all operating units, implementing secure Zero Trust access control for multi-site manufacturing environments.
• Endpoint Detection & Threat Response: Rolled out CrowdStrike Falcon EDR and Microsoft Defender across 2,500+ endpoints, establishing centralized real-time threat detection and reducing Mean Time to Detect/Respond (MTTD/MTTR) by over 60%.
• SIEM & Threat Intelligence: Deployed Microsoft Sentinel as a cloud-native SIEM, driving centralized log correlation, incident automated triage, and proactive threat hunting across IT and OT operations.
• Vulnerability Management: Operationalized Qualys VMDR and Patch Management, automating continuous asset discovery and achieving a 95%+ SLA compliance rate for critical vulnerability remediation across plant infrastructure.
• Application Protection: Deployed Web Application Firewall (WAF) solutions to safeguard internet-facing web applications against OWASP Top 10 vulnerabilities.
• Digital Experience: Designed and Implemented Zscaler Digital Experience (ZDX) in the throughout Business for monitoring the User Experience and Troubleshooting.
• Data Privacy: Accessed Business Processes and Applications for DPDPA Compliance requirement like Cookie & Consent Management, Data Flow Diagram, PII Inventory, etc.

Aditya Birla Management Corporation Pvt. Ltd. | Senior Manager – Information Security & Data Privacy

Dec 2020 – Oct 2022

Mumbai, India

• Group Security Governance: Directed cybersecurity governance, policy framework management, and compliance operations for the central management entity of the Aditya Birla conglomerate.
• Cloud Security Posture Management (CSPM): Implemented Zscaler (Cloud Neeti) CSPM across enterprise cloud environments, establishing automated misconfiguration detection, risk visibility, and continuous benchmark compliance.
• Endpoint Protection & Visibility: Deployed CrowdStrike EDR across 400+ corporate endpoints, securing critical corporate assets with automated threat isolation and policy enforcement.
• Audit Management & Compliance: Supervised internal compliance, regulatory audit cycles, and risk tracking frameworks, ensuring 100% alignment with group-wide cybersecurity standards.

Thomas Cook India Limited | General Manager – IT (Information Security)

Nov 2016 – Dec 2020

Mumbai, India

• Enterprise ISMS Program: Owned the information security governance program, developing enterprise security policies, process standards (User Access, Change Management, System Hardening), and operational SOPs.
• Data Privacy & GDPR Leadership: Spearheaded organizational GDPR and Data Privacy implementation, establishing customer data protection controls and privacy compliance frameworks.
• Audit Leadership & Remediation: Directed audit defense across ITGC, PCI-DSS, and customer security audits, maintaining a 100% resolution rate for audit observations and findings.
• Vulnerability & Incident Management: Led VA/PT remediation cycles and incident response procedures; collaborated across IT infrastructure teams to implement robust compensating controls.
• Security Awareness & Phishing: Designed and conducted organization-wide cybersecurity awareness and phishing simulations, resulting in a 70% reduction in high-risk employee email vulnerabilities.

Capgemini | Senior Consultant – ISMS (CISO Team)

Jul 2014 – Nov 2016

Mumbai, India

• ISO 27001 Governance: Served as a core CISO team member responsible for ISO 27001 standard compliance across Capgemini India operations, conducting comprehensive internal audits and risk assessments.
• Root Cause Analysis (RCA): Led RCA for non-compliances and security risks, establishing corrective action plans that reduced recurring audit findings by 40%.
• External Audit Facilitation: Managed audit preparation and execution for ISO 27001, SSAE 16 / SOC 2, PCI-DSS, and high-priority global client audits.
• Data Loss Prevention (DLP): Fine-tuned enterprise DLP policy engines, driving incident monitoring, investigation, and escalation protocols.

IBM | Security Compliance Executive

Oct 2007 – Jul 2014

Mumbai, India

• Security Compliance Operations: Managed security compliance programs, internal process reviews, non-compliance tracking, and executive reporting across major client accounts from Automobile, Manufacturing & BFSI industries.
• Infrastructure Security Coordination: Coordinated Identity & Access Management (IAM), patch management, vulnerability mitigation, and OS hardening standard operating procedures.

EARLY CAREER & TECHNICAL FOUNDATIONS (2000 – 2007)

• 3i-Infotech (2006–2007): System Administrator – Windows Active Directory, Exchange, Linux, and Network Security Administration.
• Export-Import Bank of India (2002–2007): Deputy Manager (IT) – IT procurement, Firewall & Proxy Management, Systems Administration.
• Net Connect / LYM Computers (2000–2002): Data Center Operations & Systems Support Specialist.

▪ Post Graduate Diploma in Management (PGDM) – E-Business | Welingkar Institute of Management (2016 – 2017)

▪ Diploma in Digital Electronics | Bombay Institute of Technology (1998 – 2002)

▪ ISO 22301:2019 Certified Lead Implementer – Business Continuity Management Systems (BCMS)

▪ ISO 27001 Lead Auditor & Lead Implementer – Information Security Management Systems (ISMS)

▪ DSCI Certified Data Protection Officer – Data Privacy Regulatory Requirements of India (DPDPA)

▪ CISSP – Certified Information Systems Security Professional

▪ Other Technical Certifications – Microsoft, Red Hat & Cisco Administration & Ethical Hacking (MCSE, CCNA, RHCE, CEH)