Debasish Sahu

About Debasish Sahu

I help lead and manage cybersecurity operations at Ecolab’s India Global Capability Center, supporting global security initiatives that protect our people, platforms, and products.My experience spans Product and Application Security, Governance, Risk & Compliance (GRC), Vulnerability Management, and Security Engineering, Identity and Access Management (IAM) along with direct support to our Global Security Operations Center (SOC).I focus on strengthening Ecolab’s security posture through proactive risk management, automation driven vulnerability remediation, and alignment with enterprise security frameworks and compliance requirements.Passionate about building secure by design systems and fostering collaboration between product, engineering, and security teams to drive measurable business resilience.

Experience

1. Senior Manager - Global Security

   Ecolab Digital Center

   May 2024 — Present

   I manage cybersecurity operations at Ecolab’s India GCC, supporting global security programs and driving enterprise resilience across applications, infrastructure, and cloud environments. My work involves cross functional collaboration with global teams to ensure robust risk management, compliance, and operational excellence.Key Responsibilities- Lead and coordinate local cybersecurity operations, aligning with Ecolab’s global security strategy and governance framework- Manage and mature the Product and Application Security program driving secure by design practices and continuous security assessments- Oversee Vulnerability Management lifecycle from identification and prioritization to remediation and risk reporting- Partner with Security Engineering teams to design, implement, and automate security controls across hybrid environments- Contribute to Governance, Risk & Compliance (GRC) initiatives, ensuring adherence to internal policies, regulatory standards, and frameworks (e.g, ISO 27001, NIST)- Collaborate with the Global Security Operations Center (SOC) for incident response, threat monitoring, and security event triage- Support audits, risk assessments, and continuous improvement initiatives within the GCC and enterprise security programs- Promote security awareness and best practices across product and engineering teams.Expertise in:Application Security | GRC | Vulnerability Management | Security Engineering | SOC Operations | Risk Assessment | Incident Response | ISO 27001 | Cloud Security | DevSecOps | SIEM | Threat Management

Education

• C.V.Raman College of Engineering

  Bachelor of Technology (BTech), Information Technology

  2009 — 2013

• University of Madras

  Masters, Cyber Forensics and Information Security

Skills

• Qradar
• Oracle
• Compliance Analysis
• Sox
• Technical Support
• Microsoft Office
• Javascript
• Owasp
• Splunk
• Information Security
• Itil V3 Foundations Certified
• IT Security Policies & Procedures
• Core Java
• Risk Assessment
• Html
• Windows
• Java
• Qualys
• Sql
• Linux
• Payment Card Industry Data Security Standard (Pci Dss)
• Microsoft Excel
• Java Enterprise Edition
• Pl/Sql
• Iso 27001 Lead Auditor
• Burp Suite
• Mysql
• Nessus