Varun Gupta

About Varun Gupta

I build cyber resilience where it matters most — at the intersection of board strategy, national-scale infrastructure, and enterprise transformation.With 22+ years of leadership across the Indian Navy and Big Four consulting, I operate at the frontlines of digital trust — advising Boards, CXOs, and regulators on cyber risk, resilience, and secure growth.Currently Director – Cybersecurity & Risk at PwC India, I lead multi-year enterprise security transformations across BFSI, energy, manufacturing, and critical infrastructure sectors. My mandate spans:• Enterprise cyber strategy and operating models• SOC modernization and managed security services• Cloud and Zero Trust transformation• Regulatory readiness and resilience engineering• Virtual CISO leadership across APACPrior to PwC, I served over two decades in the Indian Navy, leading mission-critical ICT and cyber defense operations across node networks and commanding frontline units. That foundation shaped my leadership philosophy — clarity under pressure, accountability at scale, and execution without compromise.I believe cybersecurity is no longer a technical function. It is a board-level business discipline.My focus:Turning security from a compliance cost into a resilience advantage.If you are building secure digital enterprises, critical infrastructure ecosystems, or board-level cyber governance models — I am always open to thoughtful dialogue.

Experience

1. Director

   PwC India

   Apr 2025 — Present

   Lead enterprise-scale cybersecurity and resilience transformation programs for global and Indian organizations across BFSI, energy, and manufacturing sectors, operating at the intersection of technology risk, regulatory compliance, and digital modernization.Drive end-to-end modernization of security operations and cloud governance frameworks across complex multi-cloud environments, enhancing threat visibility, response maturity, and regulatory assurance across distributed enterprise ecosystems.Serve as Virtual CISO for APAC and India engagements, shaping enterprise security strategy, embedding Zero Trust and risk-by-design principles, and aligning security investments with board-level risk appetite and transformation priorities.Oversee integrated managed security services spanning detection & response, governance, risk, and compliance — delivering measurable improvements in operational resilience and executive risk oversight.Advise Boards, CXOs, and Risk Committees on cyber resilience strategy, investment prioritization, regulatory readiness, and enterprise-wide security posture evolution.Partner with business and technology leadership to ensure cybersecurity is embedded as a strategic enabler of digital growth, operational continuity, and stakeholder trust.Core Capabilities:Enterprise Cyber & Resilience Strategy | Security Transformation Leadership | Cloud & Infrastructure Governance | Zero Trust & Risk-by-Design | Regulatory & Board Advisory | Large-Scale Program Leadership

Education

• Indian Institute of Management, Indore

  Certificate Course in International Business Management

• Jawaharlal Nehru University

  BSc ( Comp Sc)

• SVKM's Narsee Monjee Institute of Management Studies (NMIMS)

  Master of Business Administration - MBA, IT

• Cochin University of Science and Technology

  MSC(TELECOM)