Sourya B.

• Built and lead Cyber Security Reviews (NIST/ISO/CIS), TPRM, M&A Due Diligence and Remediation • Led integration of partner services (Sevco exposure management, Are You Secure security awareness) • Experienced presenting to Boards and C-suites • 27+MM in new business • Conference speaker (InfoSec World, BSides SF, Geek Week, SOURCE, etc.) • Expert commentator (WSJ, Evening Standard, Dark Reading, CIO Magazine, etc.) • Received CEO Choice Award, highest internal recognition

Role is akin to a Big 4 Director / Senior Manager. Helped industry executives secure their environments. Clients include some of the biggest names in Silicon Valley as well as Series B+ startups.

• Company was recently ranked the number one skincare brand in the U.S. in 2016 by Euromonitor International Ltd. Currently experiencing 50+% YOY growth with projected 2017 revenues in excess of $1.5B. • Second hire to the team reporting to Sr. Director, Tech Security & Compliance (de facto CISO), who reports to the CTO. Responsible for developing comprehensive strategy to ensure enterprise information security across all business units, and communications with the C-suite and Board of Directors. Influenced >$1M spend on information security products and services, and helped build a core team that have laid the groundwork for building a more secure and compliant organization. • Drove Payment Card Industry (PCI) compliance as mandated by card brands. Projected instant annual cost savings of $240,000 in non-compliance penalties. Responsibilities included scoping the project; implementing tokenization of card data and pause-resume functionality in call centers; driving physical security and training improvements; engaging with requirement owners, acquirers, payment gateways and evaluating QSAs, etc. • Primary stakeholder on policies, procedures, best practices, implementation, awareness and training covering all aspects of information security (Incident Response, Business Continuity Planning, Identity & Access Management, Domain Management, etc). Created multiple documentation templates. Rolled out new verification services (email, SSN, fraud check) into enrollment and order workflows, resulting in 70% reduction in fraud and chargebacks. • Drove integration of Veracode in DevOps to transition to DevSecOps. Rolled out Wombat Security phishing awareness service. Developed program to train new hires on Information Security. Part of interview panel for Security and Fraud Prevention roles. • Led Vulnerability Management leveraging Nessus and Qualys to identify and remediate critical vulnerabilities in legacy .NET and new Hybris environments.

(Back in the US after a forced sabbatical due to work visa issues, now resolved) • Part of IT Information Security & Risk Management, serving across industry verticals. Active in recruiting. Interviewed candidates at alma mater, the University of Notre Dame. • Managed a $2.4M Gramm-Leach-Bliley-Act Project Management engagement for an international bank; oversaw efforts of 4 Associates, all new to Consulting, and 1 Senior Associate. Was the senior-most employee on site. Tasks included level-setting expectations, guiding & reviewing deliverables creation, extensive engagement with client liaison, client SMEs of over 140 applications and 3rd party Program Manager. • Managed a $3M Third Party Risk Management engagement for an international bank; tasks included development of metadata schema for inclusion in GRC tool and a methodology to map 3rd party services to standardized and risk-ranked purchasing codes. Managed Experienced Associate and reported to Director. • Worked as Project Manager for $3.5M Incident Response project at an international bank with continuing PwC relationship. High impact project due to regulatory requirement of Matters Requiring Attention (MRA) response from the Office of the Comptroller of the Currency (OCC). High visibility with client senior management, necessitating regular touch points. Steered project using client-mandated proprietary project lifecycle methodology and managed approved scope creep, including conducting initial analyses & SME interactions. • Managed single work stream on a $2.2M Tech Strategy engagement at a top-5 US bank advising on the feasibility of deploying a new 3rd party Commercial Banking product. Tasks involving liaising between vendor and client stakeholders, gathering requirements, and conducting gap analyses. Driving two final deliverables and reviewing others. Developed a scoring matrix to evaluate hosting options.

(Left the position to return to the US on a new work visa; rehired by PwC without an interview) • Led pre-sales (5-member team) for support and sustaining services based on firm's proprietary iPS3 platform, targeting $20M revenue in 5 years. • Led pre-sales for remote monitoring and automated healing product i-Heal, targeting $9M revenue over 5 years. • Developed marketing collateral for firm's new Bioinformatics Services offering; drove repository streamlining of business data and development of dedicated website for pre-sales and sales. • Involved in RFP responses to (and wins from) F500 companies in Industrial Automation, Medical Devices and Logistics domains. • Part of interview panel for recruitment; responsible for Thought Leadership through white papers, articles, newsletter, etc.

• Responsible for Channel Sales, Partner Relationships and Promotions; have worked with Fortune magazine, Dell, HP, Avaya, etc. Increased revenue 400% in 4 months. • Published 300-plus articles on Cloud Computing (www.cloudtweaks.com/author/sourya), many referenced on Forbes, CNN, etc. and cited in academic dissertations (Google Scholar) and trade publications; wrote white papers for healthcare firm SEERhealth. • Technical editor of cloud computing book (http://bit.ly/15jZLPK) by Wiley, publishers of the famous For Dummies series.

(Had to leave due to work visa issues; recruited back next year) • Part of CIO Advisory practice. Obtained PMP and three Salesforce certifications. Helped firm achieve Platinum Partner status. • Helped sell and worked on a $10M Business Continuity Management and Disaster Recovery engagement for a major automotive finance captive. Led team responsible for interviewing application owners, mapping application dependencies, conducting application tiering based on RTOs, benchmarking survey of peers, researching recovery options and crafting client deliverables. • Worked in two work-streams of a $6M Information Security engagement for a major payments processor. Responsibilities included security program assessments, penetration testing, desktop hardening and mobile security assessments. • Published two internal white papers on Data Governance in the Cloud and CIOs’ Need for IT Governance. Active in recruiting.

Generated content for multiple businesses. Clients include enterprises like Intel, HP, Dell, cloud computing companies (iWave Software, Paradyne), other IT services companies (Systrix IT, Salvage Data), marketing firms (Coopontree), etc.

• Led a four-member team, including two MBAs, on the firm's first consulting project; asked by the South Bend City Council to develop a feasibility study and a strategic plan to attract companies to start operations in the state-certified Ignition Park. • Met stakeholders, devised plans, formulated surveys, wrote reports, and presented recommendations for $60MM govt. investment. • Was offered twice the average company remuneration for an intern and a performance bonus on successful completion of project.

• Led team responsible for end-to-end campaign management for new offers, meeting business and compliance needs. • Optimized efficiency by reducing campaign TAT by 30% through project automation, cut costs by $130,000 per quarter. • Presented to senior management for IT strategy development purposes; involved in recruiting and knowledge-building. • Represented company in All-India and All-State Corporate Quiz competitions, won several awards.

• Optimized efficiency by revamping audits to save 800 person-hours annually. • Promoted from Assistant Manager to Manager within an unprecedented 11 months.

• Wrote and edited daily reports and features. Covered trade fairs and industry seminars as official press representative. • Led coverage team to Auto Expo 2008; conducted interviews of leading auto executives from Mercedes-Benz, Audi, BMW, Honda, GM, etc.; resulted in 30% increase in page views (as per web traffic software Alexa) within a week.

• GMAT 750; Notre Dame Fellow on full scholarship. • Research Assistant to Dr. Michael Mannor, Assistant Professor of Management.

• Graduated top 10% of class. • Elected president of student body.