Srikanth Varma

About Srikanth Varma

I am Information Security and IT Risk Leader at Novartis, responsible for strengthening information risk, IT risk, and resilience across enterprise architecture, platforms, and data analytics, with end-to-end ownership of IT Business Continuity Management (ITBCM) and IT Disaster Recovery (ITDR).I work closely with business and technology leaders to ensure Information security, IT risk, ITBCM, and ITDR are embedded into architecture decisions, platforms, data initiatives, and automation programs from concept to go-live. My focus is on clear ownership, thoughtful risk decisions, and resilience that stands up during real disruption.With over 24 years of experience across banking, technology, and pharmaceuticals, I bring a practical, delivery-focused approach to risk governance, resilience, and crisis leadership, advising senior leaders on business impact, recovery capability, and regulatory confidence.I see information security leadership as a trusted, decision-enabling function—helping organizations scale technology, manage change, and operate with confidence while maintaining trust and stability.

Experience

1. Associate Director - Information Security & Compliance

   Novartis India

   Jan 2024 — Present · Hyderabad, IN

   Ensuring the organization\'s information security policies and practices are effectively implemented and maintained across all applications, platforms, and data-related functions.Ensuring security considerations are seamlessly integrated into every aspect of the project lifecycle. Acting as a trusted advisor to project managers (PMs) and Technical System Owners (TSOs) by helping stakeholders understand the security requirements and ensure that security considerations are integrated into the project lifecycle from the outset. Review and approve classification records. These records classify the sensitivity and criticality of data and systems, which in turn determines the level of security controls required Supporting the execution of security assessments, which evaluate the effectiveness of security controls and identify potential vulnerabilities. Monitor the portfolio of deficiencies and vulnerabilities, ensuring that any identified issues are tracked, managed, and remediated in a timely manner. Escalates potential discrepancies to higher management if necessary Acting as an escalation point in cases where there are unresolved issues between the CA Assessor and Application Managers (AMs) or PMs. Provide expert advice and facilitate discussions to resolve conflictsResponsible for managing the risk portfolio for the Applications, Platform, and Data function. This involves identifying, assessing, and mitigating risks associated with data and analytics platforms. Re-assign risk owners for any risk records in the portfolio, ensuring that risks are appropriately managed and mitigated Oversee all security and compliance activities within the scope. This includes ensuring that all necessary measures are taken to protect data, manage risks, and comply with relevant regulations and standards. Work closely with other security and compliance teams to ensure a cohesive and comprehensive approach to information security

Education

• Bharatiya Vidya Bhavan's

  Bachelor of Science (B.Sc.), Statistics & Computers

  1997 — 2000

Skills

• Project Management
• Risk Management
• Team Management
• Programme Governance
• Business Development
• Business Continuity Planning
• Program Management
• Operational Efficiency Improvement
• Service Delivery Management
• Stakeholder Management/ Client Relationship Management
• Strategy