Sudarshan Rajagopal

Partner Technology Consulting - Cyber Security @ EY

About

Technology & Cybersecurity executive with global experience of over 25 years in constructing enterprise strategy, building digital resilience and leading high performing teams across the fortune 500s to Global Capability Centres worldwide. As an EY Partner, I bring to the table technical strength in cybersecurity, cloud, enterprise architecture and AI/OT/IoT security married with board level leadership skills, scaling organizations, operational efficiency and harnessing technology as a business enabler. Some of the accomplishments I boast include successfully scaling teams from 0 to 1000 + employees, managing multi-million dollar budgets, and achieving year-over-year gains in measurable operational efficiencies. My expertise spans AI-based threat detection, OT/IoT/ICS protection, vulnerability management and penetration testing, security threat hunting and AI/ML security automation as well as the establishment of effective compliance frameworks (GDPR/SOX/PCI-DSS) or enterprise risk governance for large-scale IT environments. At EY I lead Enterprise wide Cyber and Technology programs, guiding Boards & C-suite execs, running P&L’s and developing scalable offerings that effectuate risk reduction, operational resilience and digital transformation. Previously, at Shell, I created a large sized global Security & Compliance organization that delivered governance, compliance and vulnerability management yielding >20% efficiency improvement. I have also lead vulnerability management at Shell. I was part of technology risk oversight at RBS, and had leadership positions in Wipro, HP and Vitage gaining deep technical expertise across cloud, applications, infrastructure, identity & access, threat management, AI and enterprise IT I am enthusiastic about leading with people, diversity & inclusion, talent development. I am the co-creator of programs to re-skill women returners, displaced workers, neurodiverse professionals and grads that work in partnership with industry and academia to ensure robust cyber training which is relevant to modern enterprise. Core Strengths / Keywords: Enterprise Cyber & Technology Strategy | Board & C-Suite Advisory | Cloud & Infrastructure Security | AI/OT/IoT Security | Tech Risk & Governance | Global Team Leadership & P&L Ownership| Digital Transformation & Automation | Security Architecture + Operations| Vulnerability & Threat Management| Talent Dev and Organisation scaling

Country

India

City

Bengaluru

Industry

Information Technology & Services

Skill

Digital Transformation and Automation, Global Team ownership / P&L ownership, Board and CXO Advisory, Enterprise Architecture & Risk Management , Soc modernisation & Threat Ops, DevSecOps & Application Security, Security architecture and operations , Identity and Access Management (IAM), AI Security, Cloud Security, Technology Risk and Governance, Enterprise Cybersecurity Strategy, Threat intelligence & Hunting, Talent Acquisition & Leadership, Cybersecurity Strategy and Governance, Artificial Intelligence (AI), AI/ML Security Automation (SOAR, GenAI Copilots), Threat & Vulnerability Management, OT/IoT/ICS Security, IT Service Management

Experience

Partner Technology Consulting - Cyber Security

2024-2 - Present · 2 yrs 8 mos

Lead enterprise-wide cybersecurity, technology risk, and digital resilience programs for multinational clients esp GCC. Manage P&L, business growth, and solution development, creating scalable cyber offerings spanning cloud, applications, infrastructure, SOC, identity, and DevSecOps. Advise boards and CXOs on strategy, governance, regulatory compliance, and enterprise risk, influencing critical technology and security decisions. Delivered measurable client outcomes: 30–60% improvement in risk posture, efficiency, or maturity through architecture modernization, automation, and process redesign. Lead cross-functional teams globally, combining technical depth with business execution. Drive innovation in security tooling, automation, and enterprise architecture to ensure clients are future-ready and resilient.

Global head Security & Compliance

SHELL INDIA MARKETS PRIVATE LIMITED

2020-1 - 2024-1 · 4 yrs 1 mo

Built 400-person global Security & Compliance organization from scratch in under 3 years, achieving >20% efficiency gains. Modernized governance, compliance, and vulnerability management frameworks across multiple geographies. Implemented automation and tooling, reducing manual effort by 30–50% and improving threat visibility and remediation speed. Designed and executed enterprise-wide security operating models aligned to business strategy and regulatory requirements. Delivered large-scale transformation programs, improving enterprise-wide risk posture and resilience. Co-created talent development programs, reskilling women returning to work, displaced individuals, differently-abled professionals, and graduates.

Global head Risk and Control Manager

SHELL INDIA MARKETS PRIVATE LIMITED

2019-1 - 2019-12 · 1 yr

-- Strengthened global technology risk frameworks and governance controls. -- Enhanced enterprise-wide risk reporting and board-level visibility of technology exposures. -- Provided advisory to senior leadership on risk remediation, compliance, and resilience improvements. -- Lead a large team of IRM professionals, accountable for reviewing the information security posture of projects -- Manage overall execution of the project risk assessments covering information security reviews, stage gate sign-offs and risk remediation plans -- Drive continuous improvement (CI) of IRM processes, develop and optimise the risk assessment services and actively develop tools to support IRM processes -- Ensure on-going compliance with all guidelines during and after completion of projects -- Support education and awareness of IRM issues and risks in the Business and influence the behaviours of stakeholders to mitigate these risks

Vulnerability Management

SHELL INDIA MARKETS PRIVATE LIMITED

2016-6 - 2019-1 · 2 yrs 8 mos

- Led global vulnerability scanning, penetration testing, and remediation operations. - Developed scalable prioritization and remediation frameworks, reducing high-risk exposure. - Implemented automation to accelerate vulnerability resolution, improving security posture and reducing operational risk. - Drove competence development and innovation and charting a technology roadmap by studying the deep technical area of cybersecurity - Set up a team from scratch at the IT hub in Bangalore - Undertook the processes of asset discovery, vulnerability scanning, penetration testing and attack simulation and using the results to assess and communicate vulnerabilities in the Shell IT landscapes for and to all stakeholders - Defined a clear vision to continuously improve the detection of vulnerabilities - Assisted in the management of discovery of cyber vulnerabilities and investigation of global cybersecurity incidents, where required - Managed a team and ensured that the team members develop professionally and personally

Vice President

RBS

2014-4 - 2016-5 · 2 yrs 2 mos

- Directed technology risk oversight for critical banking platforms, digital programs, and infrastructure. - Advised boards and executives on risk strategy, governance, and technology resilience. - Identified and mitigated enterprise-wide technology risks, improving the control environment and regulatory compliance. - As a member Line of Defence 2, was part of a global team responsible for overseeing technology-related issues across the bank - Identifying, assessing and addressing the technology risks in the system

Sr. Manager

Wipro

2006-4 - 2014-3 · 8 yrs

Bangalore

- Set up and handled Wipro’s Center of Excellence for Technical Risk Assessment. The team’s role was to conduct penetration testing and forensics among other things. - Managed the cybersecurity delivery model for Wipro’s global systems - Also worked for Wipro EcoEnergy, looking after the APAC region for delivery of projects in the space of Energy Management