Devashish Sharma

About Devashish Sharma

An Indian Institute of Management (IIM) Nagpur alumnus. With nearly a decade of progressive experience in the banking sector, I have cultivated a reputation as a dynamic leader who transforms strategic objectives into measurable impact. In my current role, I lead the Bank’s enterprise-wide Governance, Risk, and Compliance (GRC) initiatives with strategic precision and unwavering commitment to regulatory excellence. I ensure meticulous alignment with both domestic regulatory frameworks and international standards, embedding compliance into the fabric of daily operations. By cultivating a proactive security culture, I empower teams to anticipate threats rather than merely react to them. I oversee end-to-end risk assessments, translating complex risk landscapes into actionable insights, and orchestrate seamless cross-functional collaboration to fortify the Bank’s resilience against emerging cyber and operational threats. My approach blends strategic foresight with operational agility, positioning the Bank as a benchmark institution in risk governance and security stewardship.Demonstrated strategic leadership, I played an instrumental role as the Bank flawlessly maintained ISO 27001:2013 certification through three successive surveillance audits. Leveraging this foundation, I then spearheaded the complex transition to the ISO 27001:2022 standard, expertly guiding the institution through a rigorous transition and recertification audit, achieving compliance and setting a benchmark for excellence in security governance.My career trajectory is characterized by a unique confluence of technical expertise, operational acuity, and demonstrated leadership under demanding, high-stakes conditions. Equipped with reliability, integrity, and a forward-thinking approach, I am thoroughly prepared to undertake senior-level roles, pioneer best practices, and foster a resilient cyber risk cultureRegistered with \'National Skill Registry\' by NASSCOM.

Experience

1. Cybersecurity Specialist

   Utkarsh Small Finance Bank

   Nov 2019 — Present · Head Office, US

   Exposure in Cybersecurity Governance, Board and Management Level Committee Meetings, Strategic thinking. Skilled in handling Board Committee Meetings, Preparing Note and presentation• Development of Policies & Procedures and Reviews • Certified ISMS (ISO27001:2013) Lead Implementer• Demonstrating strategic leadership, I played a key role in the bank’s flawless maintenance of ISO 27001:2013 certification through three consecutive surveillance audits and expertly spearheaded the successful transition and recertification to the ISO 27001:2022 standard, setting a benchmark in security governance.• Developed and sustained robust Cybersecurity Awareness programs to enhance organizational security culture.• Skilled in Cybersecurity Risk Management, including process and risk reviews (AD/ AV/ DAM/ NAC/ Firewall/ to mitigate threats effectively.• Experienced in using Nessus for effective vulnerability assessment and security compliance. • Participation and Coordination during Cyber Drill by IDRBT• Vulnerability Management (VAPT/ BAS/ Vendor Risk Assessments/ Phishing Simulation)• Experienced in handling cybersecurity incidents.• Well-versed in legal and regulatory compliance related to cybersecurity frameworks• In-depth exposure to Information Security and Cybersecurity audits, including RBI CSITE IT Examination, IRAR, ISCS audits, and other regulatory audits.• Proven project management capabilities ensuring timely and efficient delivery of cybersecurity initiatives. • Strong relationship management skills, fostering collaboration among stakeholders and ensuring alignment on cybersecurity goals.

Education

• DSCI - Data Security Council of India

  Member - Delhi Chapter, Data Privacy

• Indian Institute of Banking and Finance

  Certificate in Foreign Exchange Operation, FEDAI (Foreign Exchange Dealers Association of India), FEMA, Foreign Trade Policy, FX Arithmetic

• BSI Training Academy

  Certified Lead Implementer Professional for BSI ISO27001:2013 ISMS, ISO27001 Standards

• Indian Institute of Banking and Finance

  JAIIB (Junior Associate of Indian Institute of Bankers), Banking, Corporate, Accounting & Finance, Securities Law, Capital Budgeting, FOREX Arithmetic

• National Skill Development Council

  Skill Trainer, Retail Management, Entrepreneurship, Make in India Strategy, Business Strategy

• UNITED INSTITUTE OF TECHNOLOGY, ALLAHABAD

  Certifcate, Company Logo Designng

• Motilal Nehru National Institute Of Technology

  Certificate, Intellectual Property Law

• SIET ALLAHABAD

  Master of Business Administration (M.B.A.), Human Resourse and Finance (Taxation)

  2012 — 2014

• Utkarsh Small Finance Bank

  Certificate in Advance Banking, Legal & Regulatory Aspects of Banking, FSDC, SARFAECI Act -2002, LC, DRTs, NRIs Accounts, Securities

• Indian Institute of Banking and Finance

  Diploma in Information Security Audit (DISA), Cyber Security; IT Security; IS Security Audit

• Institute for Development and Research in Banking Technology (IDRBT)

  Certificate in Proactive Cyber Defence Strategies, Validation Testing & Penetration Testing, Threat Hunting, Cyber Drill, Red and Blue Teaming etc

• Indian Institute of Banking and Finance

  Certificate in IT Security, (Cyber & Information Systems Security)