R. Pratap

About R. Pratap

With over 25 years in cybersecurity, I help organizations turn regulatory pressure into strategic advantage — and transform security from a defensive function into a business enabler.I currently serve as Assistant Director – Cybersecurity & Risk at Software Technology Parks of India (STPI), where I lead national-scale programs impacting 1,500+ institutions across India’s critical infrastructure I’ve worked with India’s top government agencies, PSUs, private sector leaders, and global tech partners. What I BringHelped organizations to protect what matters most — their data, their people, and their reputations. My expertise spans: Board-Aligned Cyber Risk Strategy – Quantifying threats, enabling secure decision-making Zero Trust & IAM Implementation – Architecting resilient, multi-cloud security postures SOC Modernization – From SIEM design to real-time incident response frameworks GRC Leadership – Embedding compliance into culture, not just checklists Red Teaming & Threat Intel – Driving proactive resilience using MITRE ATT & CK modelsThe Results Speak for Themselves 40%+ reduction in security incidents through proactive incident response 30% cost savings via cloud migration with embedded security controls 100% success in regulatory audits across 50+ environments🧠 55% improvement in user-level security awareness via training campaignsWhy It MattersIn today’s AI-driven threat landscape, cybersecurity leadership isn’t about chasing every alert — it’s about building risk-aware cultures, enabling secure innovation, and reporting with clarity to boards and regulators.If you’re looking for a security leader who combines strategic foresight with hands-on execution — let’s connect. p••••••••@gmail.com | linkedin.com/in/pratap-grc/“If you think compliance is expensive, try non-compliance.” – Paul McNulty

Experience

1. Assistant Director

   Stpi - Software Technology Parks Of India

   Dec 2021 — Present · New Delhi, IN

   Authoring and implementing enterprise-wide information security frameworks, ensuring alignment with regulatory standards and corporate objectives to safeguard sensitive information• Leading governance initiatives including data protection, disaster recovery planning, and cybersecurity audits, ensuring compliance with ISO, NIST, and GDPR regulations• Designing and implementing cybersecurity architecture, integrating solutions such as SIEM, DLP, NAC, and NBA for enhanced network and application security• Spearheading a cybersecurity team of 15, overseeing risk assessments, vulnerability testing, and compliance solutions to protect digital assets and ensure security governance• Leading incident response management for security breaches, coordinating with internal and external stakeholders to resolve issues and implement preventive measures• Negotiating contracts and collaborating with vendors and external agencies to secure IT services and optimize vendor management processes• Conducting ISMS audits including ISO 27001, VA & PT audits, for PSUs, Government Agencies, and MNCs, ensuring compliance with security standards

Education

• IETE

  B.E.

• FEROZE GANDHI INSTITUTE OF ENGG AND TECHNOLOGY , RAEBARELI

  Three Year Diploma , Electrical, Electronics and Communications Engineering

• Uttar Pradesh State Board of High School and Intermediate Education (UPMSP)

  From 6'th to Inter Mediate, Science

  1990 — 1996

• M.Tech.

  M.Tech., I.T.

  2008 — 2010