Hasthin Gateru

- Own enterprise security and technology risk outcomes supporting Monzo’s European banking expansion, operating at the intersection of regulation, product, and infrastructure. - Act as a risk owner and senior security representative across market entry, regulatory engagement, and material business decisions — providing clear, defensible risk positions to senior leadership. - Lead security strategy and execution across third-party risk, governance, vulnerability management, and regulatory compliance, ensuring Monzo can scale internationally while meeting supervisory expectations. - Embed security and risk management into product and infrastructure launches, enabling speed to market without compromising regulatory trust. - Partner closely with engineering leadership, internal audit, legal, and risk teams to ensure controls are effective, measurable, and proportionate to business risk. - Identify and plan for emerging threats, regulatory changes, and systemic risks, translating uncertainty into actionable decisions.

- Owned cyber and information risk strategy across regulated and high-assurance sectors including defence, health, space, and critical national infrastructure. - Acted as the senior risk and security authority in audit committees, project reviews, and executive decision-making forums, balancing commercial delivery with regulatory and contractual obligations. - Embedded secure-by-design and risk-based decision-making into engineering and delivery teams, aligning ISO, NIST, MOD, and HMG frameworks with real operational outcomes. - Led organisational risk maturity uplift across cloud, AI, and emerging technologies, enabling innovation while maintaining regulator and client confidence. - Positioned security as a growth enabler, improving client acquisition and trust in highly regulated markets.

- Advised C-suite leaders and boards on enterprise risk, regulatory compliance, and security operating models across financial services, public sector, and regulated industries. - Led and delivered GRC programmes at scale, including ISO 27001, SOC 2, PCI-DSS, NIS, and emerging regulatory requirements. - Acted as a trusted advisor and vCISO/vISM, helping organisations make defensible risk decisions under regulatory and commercial pressure. - Designed and delivered risk assessments, operating models, and incident response exercises aligned to business strategy rather than checklist compliance.

- Advised C-suite leaders and boards on enterprise risk, regulatory compliance, and security operating models across financial services, public sector, and regulated industries. - Led and delivered GRC programmes at scale, including ISO 27001, SOC 2, PCI-DSS, NIS, and emerging regulatory requirements. - Acted as a trusted advisor and vCISO/vISM, helping organisations make defensible risk decisions under regulatory and commercial pressure. - Designed and delivered risk assessments, operating models, and incident response exercises aligned to business strategy rather than checklist compliance.

- Worked at the heart of the UK’s national cyber ecosystem, advising financial institutions, regulators, and government stakeholders on systemic cyber and information risk. - Led and contributed to sector-level security and resilience strategy, shaping how financial services manage cyber risk at scale. - Operated with trusted, regulated entities by providing clear, proportionate, and outcome-focused risk guidance aligned with national priorities.

Worked as a Systems Analyst and Workday Administrator supporting business operations across the organisation. Owned user access, role design, and privilege management to ensure staff had appropriate, least-privilege access aligned to their responsibilities. Acted as a central point of expertise for Workday’s capabilities, supporting HR, operational, and system changes while maintaining control, auditability, and operational continuity. This role provided early exposure to identity, access governance, and the importance of system controls in enabling business outcomes.

Early-career role working across service development and IT operations within a managed services environment. Supported service transition, security operations, customer issue management, networking and hosting, and early cloud security initiatives. Gained a strong foundation in IT Service Management (ITSM), including change management, service transition, and service decommissioning, while working closely with technical and operational teams to maintain service reliability and customer outcomes. This role established a broad understanding of how technology services are delivered, operated, and governed at scale.

Managed a portfolio of approximately 1,000 customers, providing personalised wine recommendations, bespoke offers, and hosted tastings to build long-term customer relationships. Operated as a trusted advisor, understanding individual preferences and occasions to deliver tailored solutions while consistently exceeding monthly sales targets. Developed strong communication, persuasion, and conflict-resolution skills through regular customer engagement, objection handling, and service recovery. This role built early confidence in advisory-style engagement and outcome-driven conversations that later translated into senior stakeholder interaction in technology and security leadership roles.