Tushar M.

About Tushar M.

CISSP - Certified Information Systems Security Professional and #CIPT - Certified Information Privacy Technologist,risk-focused AI and technology professional with hands-on experience assessing and mitigating risks in AI-enabled systems across their lifecycle. Proven ability to partner with engineering, security, legal, and governance teams to evaluate system behavior, identify misuse and failure scenarios, and ensure appropriate controls are implemented before and after deployment. Experienced in translating complex technical risk into clear, actionable guidance for leadership, supporting informed decisions on scope, access, and safeguards while proactively addressing systemic and long-term risk as AI adoption scales.#AI #LLM #model use-cases #AKS #K8 #GCP #NIST #PCI #HIPAA #CISSP #CIPT #pentest #architecture #GDPR #ISO27001 #Compliance #audit #RAI #NIST AI-100 #Risk #Governance #assurance #strategy #ocr #hhs

Experience

1. Sr Staff Portfolio Information Security Officer

   Albertsons Companies

   Apr 2023 — Present · San Jose, CA, US

   Work closely with engineering, data, security, and legal partners to align AI system design with risk tolerance, regulatory expectations, and internal control standards throughout the lifecycle-Translate complex AI risk findings into clear, actionable guidance for senior leadership and non-technical stakeholders, supporting informed decisions on deployment scope, access, and operational safeguards-Assess downstream and cross-system impacts of AI adoption, including automation dependencies and risk amplification, and proactively recommend design changes to reduce long-term risk- Partnered with engineering and product teams to develop and execute short- and long-term security strategies-Ensured compliance with NIST800-53, internal security requirements and standards- Defined quarterly OKRs and reported on KPIs in leadership forums to ensure alignment with organizational goals- Engage to maintain security policies and procedures- Engaged in technical design and architecture discussions, using data to inform decisions- Drive vulnerability management for digital portfolio-Ensure Portfolio compliance with regulatory and board approved policies and organizational standards and procedures-Engage in proactive compliance validation through voluntary audit by the Office for Civil Rights-Threat Modeling and security control gap assessment of workloads moving to Azure Kubernetes Services-Find and minimize potential friction within the information security domain-Promote a robust security culture among all partners, both in business and technology-Monitor and analyze strategic trends that may affect security and risk and provide proactive advice to portfolio leaders-Advise digital portfolio stakeholders on security remediation and aid them in prioritizing their security needs-Drive security investment prioritization based on current and future portfolio needs, aligned with broader business goals.

Education

• University of Mumbai

  Bachelor of Engineering - BE, Computer Engineering

  1992 — 1999

Skills

• E-Commerce
• Maven
• Scrum
• Javaserver Pages (Jsp)
• Tomcat
• Hibernate
• Service-Oriented Architecture (Soa)
• Java Enterprise Edition
• Enterprise Software
• Docker
• Soap
• Jms
• Ant
• Web Services
• Apache
• Soa
• Junit
• Jdbc
• Distributed Systems
• Rest
• Weblogic
• Jboss Application Server
• Paas
• Jsp
• Hadoop
• Java
• Solaris
• Servlets
• Amazon Web Services (Aws)
• Web Applications
• Spring Framework
• Scalability
• Management
• High Availability
• Unix
• Perl
• Spring