Sandhya Dash

CISM-certified Cybersecurity Program Manager with 19+ years of experience leading enterprise-scale security programs across BFSI and media organizations. Proven expertise in portfolio delivery, program governance, risk management, and stakeholder alignment, driving complex cybersecurity initiatives from strategy through execution. Strong background translating technical cyber risks into business impact, partnering with security engineering, SOC, IAM, and GRC teams to deliver outcomes aligned with NIST, ISO 27001, CIS Controls, SOC 2, SOX, and GDPR.

Known for building execution frameworks, improving delivery predictability, and enabling secure business growth in fast-changing threat environments.

Cyber Security Program Manager - Largest North America Bank - India & USA

(2020-06 - present)

• Led enterprise cybersecurity programs spanning application security, vulnerability management, IAM, and compliance, supporting 900+ business-critical applications across global IT portfolios.
• Defined program scope, objectives, success metrics, and delivery roadmaps, ensuring alignment with business priorities, regulatory expectations, and risk appetite.
• Developed and governed integrated program plans, managing timelines, dependencies, budgets, and global resource allocation across multiple workstreams.
• Acted as a single point of accountability for executive stakeholders, providing clear visibility into program health, delivery risks, and remediation progress.
• Translated technical security findings into business-level risk insights, enabling informed decision-making by senior leadership.
• Partnered with security operations, engineering, IAM, SOC and GRC teams to coordinate vulnerability management, incident response readiness, and control assurance activities.
• Established risk-based prioritization frameworks, shifting focus from volume-driven issues to business impact and exploitability.
• Implemented governance dashboards and KPI reporting to track program performance, risk posture, and compliance status.
• Drove continuous improvement initiatives, increasing delivery efficiency by 80% and accelerating remediation timelines.
• Recognized with TCS Innovista Award (2023) for cybersecurity compliance automation and operational excellence.
• Expanded cybersecurity services portfolio revenue from $200K to $5M, demonstrating strong alignment between security delivery and business outcomes.

Cyber Security Architect & Delivery Manager - Sony Picture Entertainment: Video Analytics - India & USA

(2017-06 - 2020-05)

• Designed and governed application security architecture for AI-driven video analytics platforms, ensuring alignment with ISO 27001 and secure SDLC standards.
• Enforced security controls across application, data, and platform layers, achieving 70% reduction in deployment-related security risk.
• Led cross-functional teams delivering secure, scalable solutions, contributing to $20M incremental revenue and acquisition of 10 new enterprise clients.
• Guided adoption of emerging security practices and automation to support rapid platform growth.

Delivery Manager - Sirius XM - India & USA

(2016-06 - 2017-05)

• Secured ~$9M deal by leading presales solutioning and presenting a strong value proposition in QA and security services.
• Transitioned complete QA & security portfolio from a competitor within 2 months under strict timelines with zero business disruption.

Project Leader - XoServe - Birmingham, UK

(2014-07 - 2016-06)

• Delivered seamless integration and optimized system performance by completing end-to-end SAP-ISU functional testing for Supply Point Administration.
• Streamlined accuracy and operational efficiency in financial processes by improving billing operations for 45 SMEs.

Non-Functional Test consultant - TCS-Center of Excellence - India

(2011-02 - 2014-06)

• Delivered security assessments and performance testing for McGraw-Hill, BP, Husky, and Tata Steel Europe, improving system resilience.
• Designed large-scale load testing using LoadRunner, ensuring scalability and peak load performance for enterprise clients.

ECM Consultant - Bank of America - India, USA

(2008-06 - 2011-01)

• Developed and implemented customized secure service objects using Java/J2EE/Documentum for core banking environments, ensuring optimized performance and functionality

ECM Developer - Johnson and Johnson - India, USA

(2006-07 - 2008-05)

• Developed customized secure service objects using Java/J2EE for healthcare portals

B.E. - Electronics and Telecommunications Engineering - Biju Patnaik University of Technology (1999 - 2003)