Mithun Sanghavi

Global Cybersecurity & Risk Transformation Leader | CISO / vCISO | Cyber Resilience, AI Security, GRC & IT/OT Security

Talent

MumbaiMember since October 20, 2026

Client EngagementISO 27001GDPRDPDP Act 2023NIST CSFIncident Management

Hire this person

Send a job offer directly to this candidate

Client EngagementISO 27001GDPRDPDP Act 2023NIST CSF

About

Enterprise Cybersecurity Strategist with 25+ years of experience in architecting enterprise-wide cyber resilience, security governance, risk transformation, and regulatory compliance strategies across BFSI, manufacturing, insurance, and global consulting ecosystems. Board & CXO-Level Cybersecurity Advisor with expertise in translating complex threat landscapes and regulatory mandates—including DPDP Act 2023, GDPR, NIST CSF, ISO 27001, NIS 2.0, RBI, ITAR—into actionable security roadmaps aligned with business growth and enterprise risk appetite.

Cybersecurity Transformation

Leader driving convergence across Cloud, IT/OT, IoT, AI Security, IAM/PAM, EDR/XDR, SOC/SIEM, Threat Intelligence, Digital Forensics, and Incident Response, strengthening enterprise cyber maturity and reducing organizational risk exposure.

Global Cybersecurity

Business & P&L Leader managing a USD 35M cybersecurity delivery portfolio and 80+ member multidisciplinary team, spearheading go-to-market strategy, service commercialization, strategic partnerships, client retention, scalable vCISO/SOC-as-a-Service offerings. Future-Ready Cyber Resilience & AI Governance Champion recognized through multiple industry awards, combining AI-first security, privacy-by-design, continuous threat exposure management, business resilience, and crisis governance to build secure, compliant, and digitally resilient enterprises.

Experience

Director Cyber Security - LTM - Mumbai

(2024-11 - 2026-07)

Owned P&L and budgets for a USD 35M Global Cybersecurity Delivery Practice & GCC, driving profitable growth, commercial performance, pricing, service development, and commercialization across multi-client, multi-geography portfolios.
Built and led an 80+ member global cybersecurity team comprising Security Architects, SOC Engineers, and Analysts, sustaining 80% client retention through high-performance delivery, capability development, and client-centric execution.
Acted as vCISO for global BFSI and manufacturing enterprises, advising CXOs and Boards on cybersecurity strategy, cyber-risk, governance, resilience, security transformation, and investment priorities.
Led integrated Cyber Defence Platforms spanning AI Security, OT/IoT, Cloud Security (Azure/AWS), IAM, EDR/XDR, SOC, SIEM, Threat Intelligence, Threat Hunting, Digital Forensics, and Incident Response.
Directed cybersecurity governance and compliance programs aligned with RBI Master Directions, ISO 27001, DPDP Act 2023, NIST, NIS 2.0, ITAR, and GDPR, reducing enterprise risk exposure by 20% and strengthening regulatory readiness.
Led internal and external IT audits covering ISO 27001, ITGC, and SOC 2, establishing continuous assurance and sustained audit readiness across the global client portfolio.
Drove Go-to-Market strategies for Cyber GCC consulting portfolios, increasing market presence and client engagement by 20% in first quarter, commercializing vCISO-as-a-Service and SOC-as-a-Service offerings.
Formulated enterprise-wide Data Privacy strategies aligned with DPDPA, GDPR, and CCPA, driving privacy awareness, regulatory compliance, strategic partnerships to expand global cybersecurity delivery capacity.
Led CISO/vCISO strategy and enterprise cyber transformation across GRC, AI, Cloud, IT/OT/IoT, and resilience, improving cyber maturity by 20% across multiple business units.
Strengthened Cyber Risk, GRC, privacy, and regulatory compliance, reducing critical/high-risk exposures by 20% and elevating compliance maturity.
Transformed SOC, Cyber Defence, Threat Intelligence, and AI Security, improving threat-detection coverage and reducing MTTD/MTTR by 25%.
Governed board-level cyber risk, business continuity, and operational resilience, enhancing executive risk visibility by 20% and protecting critical processes.

Associate Director, – Cyber Security & IT Risk - Grant Thornton Bharat LLP - Mumbai

(2022-08 - 2024-07)

Global Delivery Head of Cybersecurity & IT Risk and vCISO for Global MNCs. Led global Cybersecurity & IT Risk delivery in GCC reporting to the Partner and driving expansion and scalability of the Cyber Global Delivery Practice.
Delivered vCISO-as-a-Service, establishing governance mechanisms to monitor, assess, and mitigate enterprise-wide cyber risks for global clients.
Led Cyber Defence Platforms across AI Security, OT, Cloud, IAM, EDR/XDR, SOC, SIEM, Threat Defence, Threat Intelligence, Threat Hunting, Digital Forensics, and Incident Response.
Guided Government, BFSI, NBFC, and Manufacturing clients on RBI, ISO 27001, DPDP Act 2023, NIST, NIS 2.0, ITAR, GDPR compliance, while establishing crisis, disaster management and cyber-resiliency programs.
Trained IT Audit teams across ITGC, SOX, SOC 2, and TPRM, strengthening audit delivery, control assurance, and risk governance capabilities.
Optimized strategic outsourcing models to enhance scale, growth, and profitability, while briefing Boards on security posture, control effectiveness, emerging threats, and threat-intelligence insights.

Cyber Risk and Security Delivery Manager - Wipro Limited - Pune/ Mumbai

(2018-04 - 2022-08)

Reported to the Global CISO, Aviva UK, serving as Asia Virtual CISO and IT & Infrastructure Lead for the Insurance Divestment Project, coordinating cybersecurity across Asian markets.
Oversaw IT/OT security for the Offshore Development Center and CoE / GCC supporting Toronto Pearson Airport, covering Endpoint, Network Security, IAM/PAM, Incident Response, and Cyber Intelligence.
Led End User Computing, Cybersecurity, Endpoint Security, and Compliance for HDFC Bank’s pan-India banking program, one of India’s largest private-sector banking engagements.
Conducted global IT audits across ITGC, ISO 27001, PCI DSS, SOC 1/2, GDPR, NIST RMF, ICAO, and ISA/IEC 62443, strengthening control assurance and regulatory compliance.
Built a Cybersecurity Practice delivery portfolio, developing differentiated value propositions across the client value chain while managing delivery variances through risk and change management.
Partnered with Client Engagement/Delivery Managers and CXOs to drive new opportunities and account expansion, while strengthening team engagement, delivery performance, and retention.

Cyber Security Manager - Capgemini - Mumbai

(2017-08 - 2018-04)

Managed end-to-end Cybersecurity & Compliance Operations for TOTAL, covering security audits, incident management, and lifecycle security across the enterprise environment.
Implemented ITIL-aligned SOC best practices and led the Cyber Incident Response Team, establishing and operationalizing the enterprise-wide incident response framework.

Associate Security Architect - Tech Mahindra - Pune

(2015-03 - 2017-07)

Designed and implemented security architectures for Vodafone India and Endpoint Security solutions for ANZ Bank, Australia, strengthening enterprise security posture.
Translated multi-vendor client requirements into robust security control designs, identifying and closing critical infrastructure security gaps.

Senior Consultant - Atos India

(2014-01 - 2015-03)

Served as Subject Matter Expert for Symantec Endpoint Protection and led a 40,000-endpoint migration for S&P Global and McGraw-Hill Education from SEP 11.x to 12.1, ensuring secure and seamless transition.
Delivered L3 support, malware and security-log analysis, while conducting internal Information Security risk assessments and audits to strengthen threat detection, control effectiveness, and security assurance.

Enterprise Product Support Engineer - Symantec

(2007-09 - 2013-12)