Avinash Tiwari

About Avinash Tiwari

Technically sophisticated Information Security and Risk management professional with a pioneering career reflecting strong leadership qualifications coupled with sound knowledge of Information & Cyber Security & “hands-on” expertise on various Information Security domains. Maintain focus on achieving bottom-line results and implementing advanced security technology and business solutions to meet a diversity of needs. Good records of delivering simultaneous large-scale, mission-critical projects on time and under budget. More than 20 years of experience as IT and Cyber Risk professional with experience in diverse areas encompassing Information and Cyber Security framework, IT and Cyber Risk Management, Secure SDLC, OT security modelling and data protection at various organizations in Manufacturing and BFSI domains Exhibits excellence in establishing new practice of Information security practice including Application Security, Identity Access management, Security Risk and developing offshore teams using cost effective technology to ensure compliance to policies, processes, and regulatory guidelines. Strong working experience on – Enterprise Information Security Strategy Managing Cyber Attack (Ransomware, malware) Information Security Policy, Procedure & Standard development (CIS, NIST, ISO27001) Information Security Awareness programme implementation & management Application Security Architecture Identity and Access Management IT-OT integration Security Setting up full blown Security monitoring (SOC) IT & Cyber Risk Management and Auditing Threat and Vulnerability management Data Protection & Privacy, Regulatory & Compliance Audits Governance, Risk and Compliance (GDPR, SOX NYDFS, GLBA etc.)

Experience

1. Chief Information Security Officer and Head of IT Services

   Pidilite Industries Limited

   Jul 2018 — Present · Mumbai, IN

   CISO for Pidilite Industries and its domestic & international subsidiaries• Cyber Security Strategy & Risk Management• Cyber Security Assurance• Cyber Security Resilience & Incident Management• Cyber Security Operations • Cyber Security awareness Program• Audit and Regulatory risk compliance• Data Protection and Information Security Governance• OT Cyber Security Risk• Budget and Vendor Management• Cyber/information Security team building

Education

• University of Mumbai

  Bachelor of Engineering - BE, Computer Engineering

  2000 — 2005

• Birla Institute of Technology and Science, Pilani

  M.Tech, Computing Systems and Infrastructure

Skills

• Software Development Life Cycle (Sdlc)
• Oracle
• Requirements Analysis
• Money Market
• Application Security
• Ciso
• Information Security Standards
• Iso 27001
• Application Security Assessments
• Dlp
• Software Project Management
• Itil
• Information Security Management
• Uml
• IT Controls
• Business Analysis
• .net Framework
• .net
• Identity & Access Management (Iam)
• Unix
• Information Security
• IT Security Management
• IT Risk & Controls
• Software Development Life-Cycle(Sdlc) Security
• Web Applications
• Microsoft Sql Server
• Databases
• Uam Governance
• Application Security Architecture
• Sdlc
• Web Services
• Information Security Governance
• Trading
• Requirements Gathering
• Insurance
• Information Security Awareness
• Identity and Access Management
• Mutual Funds
• Team Management
• Prince Practitioner