CHARLES PHILIP

•Cloud Security Assessment on Azure, AWS and GCP. •Conducting cloud security control assessment for all AI products integration with cloud and 3rd party SAAS solutions. •Secure by Design Assessment and Application Secure code scanning (SAST and DAST). •Cloud Security Posture Management, Data Security Posture Management and SaaS Security Posture Management control evaluation and assessment. •Cloud Security Logging and Monitoring analysis and log analytics for Azure and AWS environment. •New Cloud Workload, Services and Environment review for Azure and AWS.

•Leading Cyber Security Technology Division in India and responsible for security architecture, engineering and threat analytic platform and solution delivery. •Leading technical developer team to design and implement Cybersecurity Applications for Cybersecurity Operations team across the globe to detect and respond to Cybersecurity evolving Threat Landscape. •Responsible for conducting Threat Modelling & Rapid Threat Assessment to address the top threats that have the greatest potential impact to application. •Designed and Developed Simulated Platform for Social Engineering Defense Assessment. Application deployed to 25K employees across BOA India site. • Designed and Developed Continuous Security Assessment (CSA) tool to test application security vulnerabilities before CI/CD build stage using Mitre Attack framework. •Developing Security Innovation solutions to address core Cyber Security problem areas and automation of processes. •Evaluating New Security solution in line with Cyber Security Operation control requirements.

•Lead Technical Domain Architect for Information Security and Cyber Security. •Cyber Security Analytic. •Member of Data Security Council of INDIA (DSCI). •Hadoop (Big Data) Architecture and Security Integration Specialist. •Leading core engineering team and is tasked with building and managing technology solutions to protect information assets. •Designed Metric for measuring and managing technology security and risk. •Establishing a set of security solutions for the core engineering team; which is central to the success of the Technology Security and Risk division globally. •Lead IT Risk Management for Internal and External Risk Assessment. •Implementing Strategy and Program to ensure NOMURA information assets are adequately protected 24*7. •In-depth knowledge of multiple network and platform security tools. •Responsible for managing incidents and tracking to closure. •Responsible for creating awareness within the business lines about security and incident reporting. •Responsible for compiling list of audit issues for each business line from all sources - local and global audits and developing solution for audit point closure. •Process automation and scripting (Perl, Shell etc). •Manage priorities and resources for roll out of identified IT Risk and Information Security programs within the different business lines. •Vendor Risk Assessment and Tracking Risk mitigating plan and KRI. •Capacity Planning/Budgeting & Licensing of IT Security Infrastructure. •Demonstrating Return of Security Investments (ROSI) for IT Security Deployment to Business. •Deployment and Management of SIEM and IDS/IPS solutions. •Manage different stakeholder expectations and optimize program for maximum effectiveness. •Conducting internal investigations of security breaches by leading security-related audits. Provides recommendations to management regarding security-related operations.

•Leading Group Risk Business Assurance Internal Audit IT Team. •Conducting Risk Management for Business. •Developing Security Policy. •Conducting Vulnerability Assessment and Penetration Testing Review. •Conduct Business Continuity and IT Disaster Recovery Review. •Developing Security Architecture. •Conducting Business Impact Analysis for Business. •Member of IRC (Internal Risk Committee) at Capita Group. •Plan IT Risk based Audit Universe for Capita Group Business. •Delivery of IT Risk based Audit for Capita Group Business. •Conducting Migration Audits for Business •Conducting IT audits as per COBIT and Sox Framework. •Conducting Business Continuity & DRP Audit. •Guidance on BCP-DRP planning. •Conducting 3rd Party Review. •Setting Development Plans for Team Members. •Member of ISMS forum at Capita Group. •Conducting Business Process Audits for Capita Group Business

Location : Mumbai Key Responsibilities: Leading Team of Arcsight Security Engineer's. Setting Objective & PMO for Team Members. Setting Development Plans for Team Members. Auditing of Security Monitoring Framework. Auditing of System, Database & Application. Project Management, Budgeting & Implementation. Risk Analysis & Risk Mitigation of Arcsight System Engineering Arcsight Security Monitoring Solution Framework Globally. Engineering Security Solution using Arcsight for Application, Databases, Custom Application, Infrastructure, and Network Devices & Security IDS-IPS. Designing & Implementing Security Monitoring Framework for Microsoft, IBM, Security & Network Technologies. Designing & documentation of Key Operating Procedures for Arcsight Security Monitoring Framework. Implementing Security Policy on Monitoring Framework. ESM Compliance & Auditing of System Analysis of IS Risk Assessments. Project Planning & Implementation of New Arcsight Infrastructure Globally Developing Security Policy for Application Monitoring & On boarding. Implemented Arcsight Engineering Framework Solution for bank in USA, UK & Europe. Designing & Implementing Security Monitoring Framework for IBM in EMEA Installation, Configuration & upgradation of Arcsight Infrastructure Globally Currently Leading Arcsight Engineering & Audit Team Globally Achievement: Successfully articulated design for "Arcsight Migration" deployment in UK, USA & Europe.

Location : Mumbai Key Responsibilities: Team Leader for Asia Pacific Shared Service Organization (APSSO) handling IT Software Deployment & Security. Security Consultant for AMSSO for Symantec Security Solution. Project Manager for ADS Migration from Novell to Windows 2003 & Implementation of IBM Tivoli Configuration Manager in Asia Pacific and Europe Hills. Designing & Implementing Domain Security Policy for Windows Server. Project Architect for Migration of SUS to WSUS for APSSO & AMSSO Security Audit of Windows Server Globally Project Architect for Remote Software Deployment & Packaging Developing Key Operating Procedures for Windows Server Monitoring Achievement: Included as member for Win Standard Team of GSSO. Successfully articulated design for "NDS to ADS Migration" & "IBM Tivoli Configuration Manager" deployment in APSSO. Nominated as Security Consultant for EUC (End-User Computing Team-USA) for End user Security Policy designing & implementation.

Installation, configuration and Administering of Microsoft Windows2000, NT 4.0 and TCP/IP based Networks, installation and troubleshooting of different types of hubs and systems like Dell, HP, Compaq, IBM, Intel and Assembled machines, Laptop like IBM, Dell with OS support.; Routine Post implementation checks and preventive maintenance of installed Hardware, software and Servers. Server Management and upgrading by installation of Windows 2000 Server. Setting up Administrator's rights and security for the system. Implementation of Domain Policy on Domain Controllers. Migration of Active Directory from Novell Netware to Windows 2003. Implementation of Active Directory, Group Policy and Security policy on Domain controllers. Creation of replication Strategy & Policies for VPN Sites using Global Catalogue Servers. Created Domain Audit Policies for the ADS Servers Designed Restriction Policies on the Domain Controller Designed & Implemented Software Distribution using Group Policy on Domain Controller Implemented BS7799 Policy across Servers and Networks. Experience in Development of Security Audits Policy for Windows. Implemented Norton Antivirus Server. Designed & Deployed WSUS Server. Implementing System Security Auditing according to Companies Standards. Maintaining Backup Management with Legato & Arc Serve Backup solutions on DAT and DLT drive.

•Experience in working for an ISO 9001-2000 Certified Company. •Rated amongst top 10 solution provider in India. •Installation, configuration and Administering of Microsoft Windows2000, NT 4.0 and TCP/IP based Networks, troubleshooting of different types of hubs, switches and systems like Dell, HP, •Compaq, IBM and Assembled machines with OS support to one of India’s Largest ISP Company VSNL (TATA INDICOM).