Sachin Shetty

About Sachin Shetty

Information Security Leader with 20+ years leading product security, creating prodsec strategy/roadmap, security architecture, penetration testing and compliance risk assessments at multiple medium sized and Fortune 500 firms.• Trusted business partner for top technology companies in the US with proven expertise in product security assessments and creating product security strategy/roadmap.• Published articles; including one of the first papers on Spywares that was widely referenced by other authors/publishers, co-authored a book on application security and held multiple infosec industry recognized certifications/accreditations.• Virtual CISO for a Global product development and staffing company with more than $100 million in annual revenue and advisor to information security startups.

Experience

1. Managing Director

   State Street

   Jun 2025 — Present · Austin, TX, US

   I head the global Security Guardians function at State Street, embedding senior security advisors directly into engineering and product teams to accelerate secure-by-design delivery across multi-cloud, DevSecOps, and AI-enabled platforms.My team partners with business units, platform teams, Solution Architects, Cloud Architects and developers to. Document security secure design patterns. Remove delivery friction through embedded advisory for implementing security controls. Scale secure design implementation, implementing threat modeling recommendations and risk-informed decisioning. Translate regulatory, customer, and cyber risk requirements into practical engineering standards and requirements. Remove security related blockers for Cloud migration and other Tech-mod initiatives. Serve as a SME for AI security design and security requirements. Build a self-sustaining security culture aligned to “What Good Looks Like” maturity outcomesThe Guardians model bridges strategy and execution; enabling teams to release faster with security embedded by default, not bolted on.Focus areas include cloud-native security, identity and access architecture, agentic AI security, product security and secure software supply chain transformation across global delivery teams.

Education

• Oklahoma State University

  Master's degree, Telecom Management

  2002 — 2004

Skills

• Application Security
• Cloud Security
• Firewalls
• Security Architecture Design
• Information Security
• Security Awareness
• Vulnerability Assessment
• Vulnerability Management
• Network Security
• Cissp
• Penetration Testing
• Computer Security
• Security Policy
• Security
• Iso 27001
• Security Audits
• Information Security Management