Amit Dhawan

As an experienced IT and Information Security professional with more than 25 years of experience, I advise the Board on enterprise-wide IT, cloud risks, cyber threats, and data privacy. I ensure compliance with global standards and regulations across all geographies, and have achieved global certifications. I have led the strategic implementation of Information Security, redefining policies/procedures to current threats, and deploying programs such as CSPM, Vulnerability Management, Email Security, Data Loss Protection, and EDR, apart from hardening of infra. I initiated Data Lifecycle management to monitor and classify data, ensuring robust encryption and retention policies. I established a Product Security framework, integrating security and privacy into application development, and successfully implemented privacy frameworks. Promoting Privacy by Design, I included InfoSec teams from project conception. In cloud infrastructure, I drove automation initiatives, improving operational efficiency and reducing costs ($300K). My processes for user provisioning of cloud resources saved more than $100K, and a comprehensive cloud project lifecycle management framework saved approximately $500K. Beyond InfoSec, I lead the Customer Delivery Assurance group, developing a framework to objectify performance metrics around customer management, delivery excellence, and resource management. I have converted these into measurable elements and created a role-based platform for all roles to review progress. I have pioneered the concept of Responsible AI and ISO 42001, embedding these through policies and procedures. I have initiated continuous audit leveraging Generative AI and Machine Learning in InfoSec, Privacy, Cloud Management, and Delivery Assurance. Additionally, I have influenced company-wide culture by creating a security oath, awareness campaigns, roadshows, case studies, and demos to streamline functions across InfoSec, Privacy, Delivery Assurance, and Responsible AI.

Led teams on Technology Controls, Application Risk Management, DevSecOps, Control Self Assessment and Exception management.

CISO for American Express, Riyadh, Saudi Arabia

• Functional Head of Computer Incident Response Team (CIRT), the Cyber Security & Incident Response Organization and accountability for the Information Security of Indian Navy • Responsible for country wide Risk Assessment & IS Audits, Vulnerability Assessments Incident Response, and Cyber Forensics • Responsible for continuous improvement of the effectiveness of Information Security Policies, Processes and Technologies • Lead Cyber Forensic investigations in aid of Law enforcement agencies • Guided evaluation of various security products prior implementation • Establishing a cyber security education awareness program in the Indian Navy • Co-ordinated with various Government & non-Governmental bodies on InfoSec domains

Directorate of Naval Air Materiel •Led Major Projects (Naval Aviation Management Systems, Integrated Logistics Management System (Air) and Seaking Recovery Project • Revenue and Capital Acquisitions for various initiatives at an approximate cost of USD 700 million

Application of Digital Transformation; Strategies for Descriptive, Predictive and Prescriptive Modelling; Process Flow for Digital Transformation Innovations; Data Privacy and Algorithmic Bias; AI and Visual Recognition.