Sanket Anand

About Sanket Anand

I’m an information security leader with over 15 years of experience enabling global financial institutions to navigate complex cyber, regulatory and operational risks. With a strong foundation in both technology and law, I specialize in aligning cybersecurity with business objectives, especially within BFSI and legal-risk-sensitive domains.Currently at Morgan Stanley, I’ve led vendor risk governance, data loss prevention and incident response as a Business Unit Information Security Officer (BUISO) of Legal & Compliance division. I’ve also implemented ISO 27001-aligned vendor assessments & managed third-party risk for over 900 law firms and collaborated across engineering and governance teams to close security gaps.My work has spanned Morgan Stanley, Yes Bank, RBS and ANB through roles that blend risk strategy secure practices and process optimization. I bring a unique edge of bridging cybersecurity and law with a PhD in Cyber Laws (pursuing) an LLM in Criminal Law, Bachelors in Enginnering (IT) and a CISM certification.I thrive in cross-functional settings where risk intelligence, regulatory alignment and business enablement must coexist. As I now prepare for a greater leadership role, I’m focused on building secure, resilient and compliant digital ecosystems especially in industries like insurance, banking, fintech, Pharma and legal-tech.Let’s connect if you\'re looking for leadership in information security, vendor assurance, governance or regulatory strategy.

Experience

1. Director

   Morgan Stanley

   Aug 2020 — Present

   Led Information Security assessments across multiple control domains, ensuring compliance with internal and regulatory standards.2. Conducted vendor security assessments of over 500 law firms and vendors, aligned with ISO 27001 and firm policy.3. Managed DLP and insider threat response processes across the division; optimized rule sets and reduced false positives by 30%.4. Partnered with global risk teams to handle high-impact information security incidents and drive post-incident remediation efforts.5. Developed security metrics dashboards and led reporting to divisional leadership and governance forums.6. Initiated automation of reporting, exception handling and training workflows.

Education

• University of Mumbai

  Doctor of Philosophy - PhD, Cyber Laws

Skills

• Information Technology
• Infrastructure
• Operating Systems
• Access Control
• Troubleshooting
• Cryptography
• Security
• Iso 27001
• Security Audits
• Information Security Management
• Computer Security
• Nessus
• Information Security
• Cyberlaw
• Vulnerability Assessment
• Siem
• Network Security
• Penetration Testing
• Cyber Laws
• Linux
• Dmarc
• Networking