Mahendra Joshi

Leading the group enterprise-wide information security function, driving cyber resilience, regulatory compliance, and cyber risk management across the organisation and it's subsidiaries. Responsible for defining the security roadmap, strengthening CSOC operations, and ensuring robust security architecture, controls, and incident response mechanisms. Engaged in regulatory liaison (RBI. SEBI. CERT-In), audit and compliance oversight, security assessments, and integration of security across business and technology initiatives. Focused on enabling a cyber risk-aware culture, strengthening data protection, AI Security and aligning security strategy with evolving cyber threat through digital emerging technology and regulatory landscapes.

1. Advise management of Bank regarding critical issues that may affect the risk posture of the Banks' IT assets. 2. Articulate and present Cyber security related matters effectively across various levels of stakeholders. 3. Development of Cyber security related MIS of bank. Conduct of IS Audit on various applications including their centers. 4. Investigate cyber-security incidents, wherever required and guide the officers of NABARD.

1. Streamlined and matured regulatory supervision practices for technology and cyber security domains. 2. Introduced remote IT inspections through video conferencing service during COVID situation. 3. Brought focus on risk based systems audits, compliances to the observations, and contributed towards framing master directions, circulars and advisories 4. As a part of leadership team, led Central Procurement Office (CPO), Business Consulting Group (BCG) and critical FinTech projects like Account Aggregator, Regulatory Sandbox, ReBIT Hackathon etc. 5. Delivered tech and cyber sessions at number of esteemed training and management institutes like IDRBT, Indian Institute of Bank Management IIBM, Bombay Management Association likewise.

1. Heading Third Party Risk Management Program, 2. Leading the management initiatives in implementing and integrating management systems like Information Security (ISMS), Business Continuity (BCMS) and Quality Management Systems (QMS) as per industry standards. 3. Performing internal risk reviews, assessments and compliance and guiding the external assessments which applies to the organisation.

Senior Manager IT Audit

Profile: As an Information Risk Manager of the Treasury & Security Services (T&SS) Shared IT Risk Management group, my primary responsibility is to focus on all aspects of Third Party Service Provider compliance per JPMorgan Chase (JPMC) Third Party Oversight Standard and process - Validating Third Party Vendor profile by vendor risk prioritization, due diligence. Performing pre-review & post review meeting with assigned business/technology managers. Performing third party onsite/offsite control review of appropriate depth and detail; sharing review reports with key JPMC stakeholders. Engaging business & technology team in security processes such that identifying & deployment of appropriate compensating controls to address security/risk gaps. Validating that identified remediation plans are tracked and appropriately closed. Performing risk/vulnerability assessments and compliance/control reviews on new/legacy technology and applications. As an Information Risk Manager providing first line information risk management consulting to the technology/development team and business partners.

Profile: Direct accountable to Chief Security Officer to manage & enhance enterprise-wide information security program (ISMS). Initiate & Oversee companywide IT Risk towards all critical system, information & domain areas. Design and implement security processes and procedures as per business, customer, regulatory & standard requirements. Collaborate with various project team & department to conduct in-depth compliance audits with respect to ISO27001, Security standards, customer, regulatory requirement & likewise. Played crucial; , Project Manager (PM), Software Compliance Manager (SCM) in below security initiative & activities Change Management, Patch Management, ISMS Policies - Best Practices - Standard - Procedure, Vulnerability Assessment/Penetration Testing & Technical Audit Internal Audit, Software Asset Management,

Received Certificate of Excellence for the outstanding contribution in the Technical Support Division in year 2004-2005

At client site DotEx International Ltd [A joint venture between I-Flex (Citicorp) & NSE]. Job Profile: Install, Configure & Troubleshoot LAN/WAN Networks. Install, Configure & Troubleshoot NT based Workstation & Servers. Setup security policy as per client requirements; accordingly configure Cisco Pix, Windows based Cyber-Guard firewall & Server options. Implement Router (X25, ISDN, NAT), Switch (VLAN, Inter-VLAN routing) Microsoft cluster on Windows 2000 Advanced Server with SQL application Network/System Monitoring using MRTG, Private-I, eIQ & system utility Analysis of IIS using site server & implementation of McAfee Anti-Virus Taking backups by VERITAS Backup Exec version 8.50 Vendor Management & Asset Management

Job Profile: Worked as a FMS Engineer at client site Reliance Industries Ltd. (6 Months) Install & Configure Desktop OS, Application Software in client's PC Connect & Configure PC, Printer in network. Take care, of daily backup of SERVERS. Install & Configure of Lotus Notes Client 4.6 on user's PC Asset Management etc. Worked as a FMS Engineer at client site KVEARNER INDIA Ltd. (3 Months) Maintain Novell 3.12 servers located at Churchgate, Kalina & Wadala office. Install & Update Anti-Virus software in all users' PC. Take care of daily backup. Troubleshoot day-to-day calls of mail, desktops, & servers.