Divya Kallur Viswanath

About Divya Kallur Viswanath

As a Cybersecurity Program Director and Security Engineering Leader, I design, manage and mature robust security, enterprise/consumer IAM, AWS/Azure cloud security and vulnerability and threat mitigation programs, products and solutions for domestic/global enterprises. I have a proven track record of building and scaling comprehensive IT and cybersecurity programs from the ground up. I have been instrumental in spearheading IT/infrastructure security maturity initiatives; endpoint management, asset inventory, vulnerability/threat management, cloud security, data protection/classification and identity and access management. I have deployed and optimized Cloud Security Posture Management (CSPM) for AWS/Azure/GCP platforms. I am known for collaborating with GRC teams to operationalize the information security framework, translating regulatory/compliance requirements into actionable policies, controls and monitoring mechanisms. I have an innate ability to lead shift-left initiatives to ensure security-by-design principles into SaaS and cloud platforms implementing automated security testing (SAST/DAST) within CI/CD pipelines. I have developed Incident Response Plan and Business Continuity/Disaster Recovery framework, conducting tabletop exercises.I assist clients in creating a phased roadmap for security maturity, achieving KPIs and compliance milestones. I partner with C-suite executives in various industries as a security trusted advisor focused on proactively safeguarding organizations from security threats, vulnerabilities, risks, and breaches serving as security product and solution SME working with various vendors. I conduct analysis, and architect information security frameworks, recommending solutions that proactively identify/mitigate risks and minimize exposure of corporate data for robust security postures. I ensure security compliance to NIST CSF, CIS, SOX, ISO 27001, PCI-DSS, HIPAA, GDPR regulations and standards. I have extensive experience building and scaling governance, risk, and compliance programs from inception to maturity. I design and implement comprehensive GRC frameworks aligned with SOC 2, ISO 27001, GDPR, and SOX ITGC requirements, with proven success leading cross-functional initiatives across engineering, IT, legal, and finance

Experience

1. Cybersecurity Director

   KPMG US

   Oct 2022 — Present · San Francisco, CA, US

   I have served in multi-faceted functions as a cloud security and enterprise/consumer IAM program expert and thought leader focused on internal strategy and as a trusted advisor for various simultaneous programs with a deep breadth of experience assessing, designing, and implementing cutting edge, programs, solutions and technologies.Developed and defined multi-year cybersecurity strategies and roadmaps by analyzing key risk and threat attack vectors, advising the CISO on major risks and mitigation priorities. Drove detailed project definition along with KPI and KRI definitions and secured executive sponsor buy-in for key initiatives by leading cross-functional teams and clearly communicating risk-based justification and business value. Established governance and tracking mechanisms for roadmap execution, ensuring alignment with organizational objectives and continuous improvement of security posture against evolving threats. Led comprehensive cybersecurity maturity assessments and strategy programs across all security domains, establishing baseline security postures and identifying critical gaps to inform strategic planning. Partner with technical teams to conduct deep dive cloud security posture assessments and provide strategic advisement and recommendations, prioritizing needs and investments Serve in hands-on leadership capacity driving multiple key internal innovation projects. I piloted design of proof of concept (POC) and deployment of developing security frameworks for Cloud, Multi-Cloud, IAM and container security.Define success criteria (OKRs/KPIs/KRIs), develop roadmaps and lead the execution of complex, cross-functional IAM modernization programs across cloud and on-prem. Partner with Engineering, Product management, Security, and Compliance to drive programs from strategy to execution. I lead the teams to define product roadmaps, IAM governance frameworks, prioritizing critical features to ensure alignment with business goals.

Education

• National University of Singapore

  Masters, Information Security

  2011 — 2012

• Visvesvaraya Technological University

  Bachelor of Engineering - BE, Computer Science

Skills

• Oracle Access Manager
• Ldap
• Network Security
• Iam
• Siteminder
• Jsp
• Weblogic
• Oid
• Security
• Pki
• Cryptography
• Soa
• Oracle
• Idm
• Role Based Access Control
• Unix
• Information Security
• Access Management
• Saml
• Security Architecture Design
• Encryption
• Programming
• Java
• Application Security
• Oracle Identity Manager
• Sso
• Identity Management
• Rbac