Maya Mishra

About Maya Mishra

I’m a cybersecurity and governance professional with 15 years rich experience leading multi-regional programs in Information Security, Data Privacy, AI Governance, and ESG-aligned GRC across Asia, Europe, and the Americas.As Lead – Information Security Governance at UPL, I’ve established frameworks that integrate AI Security, AI Governance, and Data Privacy with enterprise-wide GRC and ESG objectives, ensuring responsible, transparent, and sustainable technology use.I drive initiatives that strengthen organizational resilience through policy governance, risk assessments, compliance dashboards, and cross-department collaboration — aligning cybersecurity maturity with business and regulatory expectations.My work aligns with global standards such as MAS TRM, ISO 27001, ISO 42001, NIST, GDPR, and DPDPA, while embedding accountability into digital transformation and ESG strategies.I’m passionate about advancing responsible AI and technology governance — where security, privacy, and sustainability intersect to create long-term trust and measurable business value.Key Areas: Cybersecurity Governance | GRC | Data Privacy | AI Security | AI Governance | ESG | Sustainability | Third-Party Risk | Regulatory Compliance | Risk Assessment | Policy Governance | Cross-Functional Collaboration | Awareness & Culture

Experience

1. Global is Governance & Data Privacy Lead

   UPL

   Sep 2024 — Present · IN

   Leading global initiatives in cybersecurity, data privacy, AI governance, and ESG-aligned information security, ensuring consistent governance, compliance, and resilience across regions including Asia, Europe, LATAM, and North America.Key Achievements & Responsibilities:Established UPL’s AI Governance and AI Security framework, ensuring responsible AI adoption aligned with data protection, ethics, and regulatory requirements.Designed and implemented a Global GRC Compliance Dashboard providing leadership visibility into risk posture, control maturity, and audit performance.Drove enterprise-wide data privacy alignment with GDPR, DPDPA, and regional data laws, collaborating with business, legal, and IT teams for integrated compliance.Championed the inclusion of ESG-linked cybersecurity governance by connecting information security controls to sustainability and risk reporting metrics.Conducted periodic information security risk assessments and third-party risk reviews, reducing gaps and improving remediation timelines.Led cross-functional awareness and accountability programs across departments, fostering a culture of shared responsibility for cybersecurity and privacy.Supported global policy governance, risk frameworks, and assurance initiatives in line with MAS TRM, ISO 27001, and NIST standards.Impact: Strengthened organizational resilience by embedding security, privacy, and AI ethics into governance practices — aligning digital transformation with UPL’s sustainability and ESG vision.

Education

• B.Tech in Electronics & Communication, SNDT Women's University

  B.Tech, Electrical, Electronics and Communications Engineering

  2006 — 2010

Skills

• Iso 27001 Lead Auditor
• Security Policy
• IT Governance
• Process Auditing
• Security Audits
• Solution Implementation
• Vulnerability Management
• Standards Compliance
• IT Risk Management
• Compliance Management
• Information Security
• Data Security
• Network Security
• Risk Assessment