Abhishek Mitra

About Abhishek Mitra

Results-oriented Information Security leader with 22+ years of experience driving security initiatives across diverse geographies and industries. Proven ability to establish, lead and inspire high-performing teams, develop strategic security programs, and achieve demonstrable results in compliance, risk management, and security operations. Expertise in building and scaling security programs, risk management, and leading M&A due diligence and integration efforts.Significant experience with a number of global laws, regulatory requirements and standards including: OCC; FFIEC; HIPAA; NIST CSF; NIST 800-53; ISO 27001; HITRUST CSF, China Cyber Security Law, China PIPL, China CBDT, POPIA (South Africa), CERT-IN Regulations in IndiaHighlights:• Directed Information Security for PepsiCo\'s AMESA & APAC sectors, managing a team of BISOs and leading security initiatives across multiple countries while concurrently serving as the Information Security Site Leader for the India Capability Centre of PepsiCo.• Established Information Security Councils with regional CEO and business leaders, fostering collaboration and driving targeted security actions tailored to local business models and regional risks.• Led Due Diligence & Integration for multiple M&A transactions, ensuring seamless security posture integration.• Achieved industry-leading results in vulnerability management• Led or supported compliance programs with CERT-IN requirements in India, China Cybersecurity Law, Personal Information Protection Law (PIPL), and MLPS Certification and POPIA South Africa • Advised leading financial institutions and healthcare providers on cyber risk strategy, compliance, and infosec program management.• Pioneered the Infosec Healthcare practice at Deloitte US India office in Hyderabad, building a team of consultants supporting major US healthcare clients in various cybersecurity program implementation.Key Skills:• Security Strategy & Governance• Risk Management & Compliance• Vulnerability Management • Security Architecture • Mergers & Acquisitions (M&A) Due Diligence• Medical Device Security• Contract Management• Third Party Risk Management• Team Leadership & DevelopmentQualifications and Certifications include- GIAC Defensible Security Architecture (GDSA)- Project Management Professional (PMP)- SABSA Chartered Security Architect- Certified Scrum Master- ISO Lead Implementer- MBA with a dual specialization in Entrepreneurship and Marketing.I\'m passionate about building strong security programs that enable business growth while mitigating risk.

Experience

1. Director - Information Security

   PepsiCo

   Dec 2020 — Present · Hyderabad, IN

Education

• Indian School of Business

  MBA

  2008 — 2009

Skills

• Business Intelligence
• Management Consulting
• Business Analysis
• Pre-Sales
• Requirements Analysis
• Consulting
• Analytics
• Business Process
• Business Process Re-Engineering
• IT Strategy
• Business Process Improvement
• Business Analytics
• Strategy