Sudhir C

Sudhir C

Assistant Vice President | Enterprise GRC & Operational Resilience

MCA, CISM, CEH, CCMP, CDPO, ISO 27001 LA, CSSBB, Certified Cyber Mentor. Enterprise GRC and Operational Resilience leader with 17+ years of experience leading governance, risk, compliance, cybersecurity, technology risk, privacy, and resilience programs across highly regulated industries including Banking, Financial Services, Manufacturing, Telecom, and Technology.

Currently serving as Assistant Vice President at an RBI subsidiary, responsible for enterprise governance, regulatory compliance, operational resilience, cybersecurity assurance, and risk transformation initiatives supporting critical financial infrastructure. Expertise spans enterprise risk management, architecture governance, secure SDLC, DevSecOps governance, third-party risk management, cloud governance, software supply chain security, and executive advisory. Recognized for building high-performing governance programs, strengthening risk culture, enhancing audit readiness, and enabling secure, resilient, and compliant business operations.

Open to leadership opportunities across Enterprise Governance, Risk Management, Cybersecurity, Operational Resilience, Technology Risk, and Regulatory Compliance functions.

EXECUTIVE LEADERSHIP HIGHLIGHTS

• GRC lead for RBI-regulated financial infrastructure and strategic banking ecosystem initiatives.
• Expertise in Enterprise GRC, Cybersecurity Governance, AI Governance, Architecture Governance, Operational Resilience,

Privacy and Third-Party Risk Management.

• Extensive experience leading governance, compliance, audit, risk management and resilience programs aligned with ISO

27001, ISO 27017, ISO 27018, ISO 22301, ISO 15408, NIST CSF, PCI DSS, SOC 2/3, GDPR, DPDPA, RBI regulatory requirements and related industry frameworks.

• Strong executive engagement experience with Boards, CISO, MD, regulators, auditors, customers and business leaders.
• Extensive experience supporting global regulatory and customer audits including FFIEC, APRA, HKMA, DORA, MAS TRM,

ECB, JFSA, SOC 2, PCI DSS and NIST-based assessments.

• Proven success in governance automation, risk culture transformation, strategic sourcing, vendor governance and cybersecurity program leadership.
• Experienced in cybersecurity budgeting, investment planning, vendor selection, RFP/RFQ development, contract governance, client engagements and security strategy execution.

SELECTED ACHIEVEMENTS

• Established Control Self-Risk Assessment (CSRA), control assurance and governance programs across critical banking and financial technology environments.
• Built and institutionalized the Beyond Compliance initiative, transforming cybersecurity awareness into an enterprise-wide security culture program with participation exceeding 95%, earning recognition from leadership and RBI Board.
• Introduced governance practices for Software Bill of Materials (SBOM).
• Delivered audit success rates exceeding 95% across regulatory, customer, certification and internal audit engagements.
• Implemented governance automation, executive dashboards and reporting solutions improving visibility into risk posture,

compliance performance and operational resilience.

• Strengthened organizational resilience through structured BCP, BIA, DR and crisis management governance programs.

CORE COMPETENCIES

Enterprise GRC | Enterprise Risk Management | Cybersecurity Governance | Operational Resilience | AI Governance | Architecture

Governance | Regulatory Compliance | Technology Risk Management | Third-Party Risk Management | Privacy & Data Protection |

Secure SDLC | DevSecOps Governance | Cloud Security Governance | Security Architecture Reviews | SBOM Governance | Control

Assurance | ITGC | ITSM | BCP & Disaster Recovery | Crisis Management | Audit & Assurance | Executive Reporting | Board

Presentations | Budgeting & Investment Planning | Vendor Governance | Strategic Sourcing | Governance Automation | Security

Culture Transformation.

MCA (Masters in Computer Application)