Mahendra Soni

About Mahendra Soni

I am an Information Security and Risk Leader with a proven record of setting up, leading, and managing assignments across multiple industry verticals and global operations. Over 15 years of career experience in Information and Cyber Security management, Project and Stakeholders management, Technology Risk management and Privacy governance. My experience in setting up, building, and developing the Information Security and Risk Management functions have made me known as a knowledgeable and pragmatic leader with good understanding of business constraints and ability to provide appropriate solutions to ensure enterprise systems and processes are well integrated with operational needs and supported across business. Exceptional service orientation with ability to collaborate, communicate with multiple stakeholders, and seek out opportunities to share expertise provide added value to the organization. Continuous learner with a passion for innovation in Information Security risk management to drive bottom-line business contributions. Exceptional levels of integrity, work ethic, and drive to achieve. Working experience in global environment. As a ‘Business Enabler’, I have: Designed IT Security solutions to fulfil business requirements globally. Developed and implemented Cyber Security Strategy and roadmap that contributes to global business growth by enabling innovative solutions and Digital Transformation, in close coordination with Executive Board. Implemented IT Governance, Risk & Compliance (GRC) processes, eliminated overlapping of regulations, redundant audit programs, manual processes & saved recurring cost in millions. Implemented controls to adhere with Global Data Protection & Privacy frameworks like GDPR. Key Skill Areas Include - 1. Global Stakeholder Management including working with company boards. ISMS Program Management. Information and Cyber Security Strategy and Governance. Cyber Security Program Management of Large & Complex Technology Ecosystem. Data Privacy Compliance across multiple regulations and geographical regions including EU GDPR, Canada PIPEDA, Australia and New Zealand Privacy Acts among others. Management of multi-million-dollar budgets while working with local and global vendors to ensure cost effective services with required service levels. Information Security Project Implementation and Management. Cyber Security Tools and Technologies Evaluation and Selection. Cyber Incident Management Life Cycle. Business Continuity Planning & Disaster Recovery.

Experience

1. Regional Head & CISO, Apmea

   Sodexo

   Apr 2021 — Present · Mumbai, IN

Education

• B.E in Electronic & Communication Engineering - SINHGAD COLLEGE OF ENGG

  B.E in Electronic & Communication Engineering

  2002 — 2005

• MBA – IT - NIBM [National Institute of Business Management].

  MBA – IT

• Diploma in Electronic & Communication Engineering - THAKUR POLYTECHNIC

  Diploma in Electronic & Communication Engineering

  1999 — 2002

• ISAC

  Certified Cyber Crime Intervention Officer (CCIO)

  2022 — 2022

• BSI Training Academy

  ISO/IEC 27701:2019 Privacy Information Management and GDPR Lead Implementer

  2020 — 2020

• BSI Certified - ISO 27001:2013 LA

  ISO 27001:2013 Lead Auditor

• BSI Certified - CRisP - Certified Risk Professional - BCRM

  CRisP

• ITIL v3 Certified

  ITIL v3 Certified

Skills

• Disaster Recovery
• IT Operations
• Service Delivery
• Software as a Service (Saas)
• Iso 27001
• Business Continuity
• Pci Dss
• Itil
• Incident Management
• Information Security
• Information Security Management
• IT Service Management