Goutham Danya

About Goutham Danya

Results-oriented and seasoned Cyber Security leader with over 17 years of extensive…

Experience

1. CISO of Google Payments India

   Google

   Jul 2024 — Present · Bengaluru, IN

   Core Leadership & Technical Competencies- Strategic GRC Leadership: Expert in establishing and leading comprehensive Governance, Risk, and Compliance (GRC) programs, including ISO 27001, PCI DSS, and Regulatory frameworks. Proven ability to develop and execute security strategies, manage IT Risk, and oversee Data Privacy assessments- Advanced Security Architecture & Operations: Deep knowledge in DevSecOps, leading Vulnerability Assessment & Penetration Testing (VAPT), Web Application Security, and comprehensive Secure Development Life Cycle- Enterprise Risk & Resilience: Strategic oversight of Business Continuity Management (BCM) and Internal Control Assessments, ensuring organizational resilience against evolving cyber threats, including proactive defense against ransomware, supply chain attacks, and advanced persistent threats- AI Security & Emerging Technologies: Adept at assessing and mitigating risks associated with Artificial Intelligence (AI), Machine Learning (ML), and other rapidly evolving technologies. Experienced in developing security strategies for AI-powered systems, data privacy in AI contexts, and addressing new attack vectors introduced by these innovations- Stakeholder Engagement & Program Management: Exceptional ability to drive successful project execution, supervise diverse security teams, track performance metrics, and build strong, collaborative relationships with business executives, directors, and external audit teams.

Education

• Bangalore University

  B.Sc, Electronics

  2004 — 2007

• Alliance Business Academy

  Master of Business Administration (MBA), Management Information Systems and Services

  2009 — 2010

Skills

• IT Strategy
• Iso 27001 Lead Auditor
• IT Service Management
• Pci Dss
• Risk Assessment
• Itil
• Solution Architecture
• Information Security
• Management
• Security
• Iso 27001
• Auditing
• Project Management
• Information Security Management
• Sox 404
• Team Management
• Vulnerability Assessment
• Threat & Vulnerability Management
• Pre-Sales
• Consulting
• Network Security
• Vendor Management
• Service Delivery
• Requirements Analysis
• Cloud Computing
• Egrc