Mitesh Agarwal

About Mitesh Agarwal

Cyber Security leader and transformation advisor with experience in designing and operationalizing cyber capabilities focused around Security Governance, Application Security, Vulnerability Management, Data security and integration with other cyber domains in the organization for maturity.Driven emerging capability development in IoT, ICS & medical device security. Lead large teams across multiple global clients and varied cyber capabilities with business development, client pursuits and hiring responsibilities.SABSA - SCF | CISSP | SANS - GPEN | ISO 27001 LI | ITIL V3 Foundation | AWSDetail experience include- Established and operated global Application Security services for large organizations including DevSecOps capabilities- Managed cyber security projects portfolio for large clients with global presence- Driven end to end cyber transformation with budget planning, security strategy development, technology selection, implementation and managing roll-outs- Assessed security program against compliance requirements and established effective security governance and IT Risk Management Programs (including GRC solutions design)- Acted as a risk assessor for organization’s network security, computing stack, SSDLC, access control, physical security and 3rd party security- Developed strategy and assessed organizations for cloud security and data protection- Designed requirement, use cases and architecture for CASB, NW infrastructure, cloud services, vulnerability/threat management, data security, cyber analytics, etc- Implemented ISO 27001 for large enterprise and BU level with perfect zero non-conformity- Performed penetration testing on numerous NW/Apps, social engineering, config reviews (DB, OS, NW devices) and architecture review- Developed playbooks and TOM for key management and SSDLC- Reviewed application design and network controls for PCI-DSS compliance readiness- Developed DFDs for data privacySecurity is never complete. The more appropriate controls are implemented more tougher it is to break through.

Experience

1. Senior Director - Secops Vulnerability Services

   Novartis

   Mar 2019 — Present · Hyderabad, IN

   Hyderabad, Telangana, India

Education

• Symbiosis Centre for Information Technology

  MBA

  2006 — 2008

• North Orissa University

  B.S.C

  2003 — 2006

Skills

• Security
• Iso 27001
• Consulting
• IT Strategy
• Social Engineering
• Information Security
• Itil V3 Foundations Certified
• Penetration Testing
• Management
• Vulnerability Assessment
• Pci Dss
• Privacy Law
• Itil
• Security Management
• Risk Assessment
• Information Security Management
• Infrastructure Security
• Governance
• Vulnerability Management
• IT Audit
• Business Analysis
• Data Center
• Cryptography
• Computer Security
• Requirements Analysis
• Data Loss Protection
• Sdlc
• Risk Management
• Team Management
• Sas70
• Application Security