Nelesh Baichan

As CISO at Digital Resilience, I am responsible for driving the company's internal cybersecurity strategy while also collaborating with the product and sales teams to ensure that our solutions meet the highest industry security standards. I lead the development of security programs that protect both the organization and its clients. Key Achievements & Responsibilities: Cybersecurity Strategy & Leadership: Developed and implemented the organization's internal cybersecurity strategy, ensuring protection of corporate data, systems, and intellectual property. Client-Facing Security Expertise: Worked closely with sales teams to provide technical security guidance and demonstrate the security capabilities of our products to prospective clients. Regulatory Compliance: Ensured the company adhered to relevant security regulations, including SOC 2, ISO/IEC 27001, and GDPR, enhancing trust with clients and partners. Product Security Oversight: Collaborated with product teams to integrate robust security measures into the development and delivery of cybersecurity solutions, ensuring products met industry-leading standards. Incident Response & Crisis Management: Lead the organization’s incident response strategy, managing both internal security events and providing guidance on incidents affecting clients. Security Awareness & Training: Implement internal training programs to ensure employees followed best security practices, reducing the risk of internal vulnerabilities and improving customer trust. Risk Management & Vendor Security: Oversee risk management initiatives, ensuring that vendor relationships were secure and third-party solutions met security requirements. Collaboration with Sales & Marketing: Support sales and marketing teams by translating complex security concepts into clear value propositions that resonated with clients, enabling more secure product offerings.

Establish, oversee and enforce relevant controls to ensure that only the right people have access to required information Knowledge of security best practices Ongoing monitoring and reporting of team members to ensure everyone works optimally. Compile and submit reports and Incident Dashboard to relevant boards Develop a Cyber Security Strategy and establish short- and long-range business plans to achieve the strategy Manage & mentor team members. Provide managerial oversight in the development and implementation of an information security program Prepare financial forecasts for security operations & proper maintenance cover for security assets. Manage operational and strategic security team Evaluate and recommend security controls in all enterprise architecture projects Design, implement and execute on a cyber security 5-year roadmap to support the overall IT strategy of the company Develop and implement key processes and procedures to incorporate security throughout the SDLC process Drafting of RFPs, contracts, and Work Orders as well presenting the outcomes to Exco Analyse deficiencies / gaps in the current IT security posture Research and drive new security control initiatives and improvement Implementation, support and maintenance of IT security compliancy and monitoring technologies Supervise development of corporate security policies, standards and procedures Advise on internal and external information security threats to allow the CSIR to focus efforts, & allocate budget for the mitigation of the security threats Manage the security operational team to ensure the Incident Management process is adhered to and performed as designed in the playbooks via simulations. Utilize problem solving skills & techniques to drive the resolution of issues/incidents. Manage external pentesting initiatives within the organisation Work with the service delivery and various outsourced partners to ensure adherence against various contracts, Work Orders and SLAs are achieved.

Assist in the definition and establishment of a Cyber Resilience capability for LHL Ensure all cyber resilience activities are incorporated within the ISMS & other risk management strategies, in order to deliver seamlessly across LHL Drive and support the Cyber resilience plans & activities across LHL and in conjunction with relevant third parties and / or other Group functions Define and manage Cyber Events and Crisis Management Processes across group Manage Cyber and Information Security Awareness for the group Ensure best practice adoption as it pertains to Cyber Resilience (i.e., ISO standards, ISF standards, etc.) Support and assist the Group Chief Information Security Officer (CISO) Define and drive a Cyber Resilience plan and roadmap that is aligned to the business and information security strategy. Organize and coordinate technical Vulnerability Assessments which include but not limited to penetration testing. Establish a stakeholder network to ensure ongoing engagement and communication about cyber risks and mitigation. Conduct regular Cyber assessments and reviews to ensure a mature cyber resilience environment. Ongoing monitoring and reporting. Ensuring the Incident Management process is adhered to and performed as designed via simulations. Keep abreast of relevant developments Evaluating and recommending tools and technologies. Manage Cyber incidents and take ownership for effective coordination until resolution Trend and pattern analysis across incidents. Assist in designing and documenting all process flows, procedures and controls. Ensure that appropriate capabilities are built / leveraged to ensure the successful resolution of cyber security related incidents. Create and run Red team, blue team simulation.

• Conduct scoping and close out session for all penetration tests. • Web Application penetration testing on multiple platforms. • Mobile application penetration testing on IOS and android. • Infrastructure and multiple hardware device assessments. • Wireless security penetration tests. • Black box penetration testing. • Physical access evaluation. • Application assessments. • Reporting on assessments. • Software build hardening assessments. • Manage and handle third party pentests as well as my own.

I provide efficient and effective domain & mail administration as well as 2nd level application service and support to users’ Exchange-Mail, Microsoft Office, Right Fax, Mail Marshal, File Print Servers, and Creation of Lotus Notes accounts. I provide administration support for approximately 120 server (Exchange-Mail, Right Fax, File Print) and access across 154 domains controllers over 4 different domains. My main responsibilities are Support and Administration. My responsibilities: • Administration support of Exchange Mail including Mail Access, Server Availability, Mail Flow, and Full Mailboxes. • Administration support of Right Fax and File Print Servers. • Technical Support of Internet related issues and Microsoft Office. • Was assigned to carry out a project to do clean ups of all dormant domain accounts, exchange accounts, File Print Servers and migrating users and groups. • Assess Security risks on user’s notebooks and make sure Virus definitions are up to standard. • Creation and deletion of Exchange Mailboxes, working on Active Directory (Creation and deletion of Users accounts). • Creation and deletion of Lotus Notes users accounts. • The Creation of Users on Right Fax, users on File Print Servers, and Internet. • Clean-ups of Exchange, File Print Server, Dormant Accounts and Migrating users. • Pre and post administration Support. • Working on Mail Marshal to ensure secure mail is delivered. • Research and develop ways and means to assist and support users more efficiently. • Assisted in the creation of more user friendly teamtrack forms.

Duties Performed: o Desktop Support o Helpdesk Support o All Printer Repairs o Installation of all software o All computer repairs and installation o Setting up Pc and notebooks on network o Client liaison *Under this company I also done a lot of Outsourced work, see below; 1. Adcock Ingram, doing second line support My goal at this company was to bring down the number of open calls, which has been achieved with great success. Duties; Oracle Setup and configuration Laptop and PC setup and troubleshooting Loading of applications and application troubleshooting AS400 Install Installation Active Directory (For User Account management) Ex-Server (Creating User Accounts) File Servers (Software backup and storage), Users documents backup Dameware & RDP for remote access Email setup and troubleshooting 2. LexisNexis I was the sole IT Support for JHB in this company and have to perform all IT related duties from printer to servers.

Cum Laude(Governance,Forensics,information Security)

Information Technology Diploma-Web Development