Prashant Sawant

About Prashant Sawant

Cybersecurity Professional with 22+ years of experience in information security, enterprise risk, governance, and technology transformation. Expertise in building and executing robust security frameworks, conducting architecture reviews, and managing AppSec and vulnerability programs to strengthen organizational security posture. Skilled in aligning security programs with business objectives, driving security-by-design, and leading large-scale security transformation initiatives across complex enterprise environments.Core Competencies:• Information Security Management• Security Architecture and Design• Security Strategy Development• Risk Management• Security Metrics and Reporting• Security Awareness & Training ProgramsVision:\"To ensure secure and seamless digital transformation by embedding security-by-design, strengthening risk governance, and fostering a culture of cyber resilience across the organization.\"

Experience

1. Vice President Information Security

   SMFG India Credit

   Oct 2023 — Present · Mumbai, IN

   Led enterprise security strategy and architecture to strengthen cybersecurity posture across the organization.• Defined and implemented robust information security governance, risk management, and compliance frameworks.• Conducted AI risk assessments and governance evaluations based on the NIST AI Risk Management Framework (RMF).• Defined AI security and risk controls aligned with NIST AI Framework principles and best practices.• Mapped AI controls and compliance requirements against RBI’s “7 Sutras” for responsible AI adoption in financial services.• Conducted end-to-end risk assessments, vulnerability reviews, and control gap analysis to reduce exposure.• Designed security controls aligned with business goals, technology strategy, and risk appetite.• Established and monitored Key Risk Indicators (KRIs) and security metrics for executive reporting.• Directed security program planning, including policies, standards, and incident response readiness.• Evaluated emerging security technologies and drove adoption to improve detection, prevention, and response.• Aligned security controls and frameworks with business and security-by-design strategy as per regulatory guidelines• Managed stakeholder engagement across business, IT, and executive leadership for security alignment and decision-making.Key Projects: • Evaluated & deployed of ZTNA and secure web gateway to enforce zero-trust access and improve network security posture.• Evaluated & deployed deception-based security controls to detect advanced threats and improve early threat detection capabilities.• Evaluated & deployed ITDR solution to monitor and mitigate identity-based risks, including credential theft and account takeover.• Evaluated & deployed for external attack surface management and continuous security scorecard reporting• Evaluated & deployed phishing simulation platform to strengthen user awareness and reduce phishing risk.

Education

• CISCO & Other Certifications

  Network & Securtity

  2000 — 2017

• BSI Training Academy

  Postgraduate Degree, Computer and Information Systems Security/Information Assurance

  2017 — 2026

• University of Mumbai

  Bachelor of Commerce (B.Com.), PGDIT

  2000 — 2001

Skills

• Wan
• Managed Services
• Integration
• Cisco Routers
• Project Planning
• Vpn
• Checkpoint
• Wireless
• Switches
• IT Service Management
• Business Process Improvement
• Ccnp
• Voip
• Telecommunications
• Data Center
• Infrastructure Planning
• Project Management
• Network Security
• Pre-Sales
• Infrastructure
• Troubleshooting
• Service Delivery
• IT Operations
• Routers
• IT Management
• Information Security
• Ccna
• Routing
• Mpls
• Information Technology
• Network Design
• Network Architecture
• Business Development
• Team Leadership
• Cisco Technologies
• Networking
• Firewalls
• Vendor Management
• Virtual Private Network (Vpn)