Vijay Hatewar

About Vijay Hatewar

As the Chief Information Security Officer at Fynd, I lead enterprise-wide cybersecurity strategy, governance, and risk management — ensuring that security enables innovation rather than restricts it.With over two decades of experience across financial and technology sectors, I’ve held leadership roles at Cuscal, National Australia Bank, Mastercard, and Citibank (Singapore), where I built and led teams in Security Operations, DevSecOps, SRE, and Performance Engineering.I believe a CISO’s role is that of a strategic risk manager — integrating security seamlessly into the business fabric. I’ve driven the shift-left approach in cybersecurity, embedding security controls early in the SDLC to build resilient systems by design.My work is guided by leading frameworks such as NIST, COBIT, SOC, ISO 27001, GDPR, CCPA, and SABSA, with a strong focus on risk management, compliance, and cloud security (AWS & GCP).I’m a certified CISSP and CISM, passionate about developing high-performing security teams, automating defenses, and fostering a culture where security is everyone’s responsibility.

Experience

1. Chief Information Security Officer

   Fynd

   May 2022 — Present

   Chief Information Security Officer (CISO)**As CISO at Fynd, I lead the company’s cybersecurity strategy, overseeing all facets of information security, risk management, and compliance. With over 20 years of global experience in the cybersecurity domain, I have built Fynd’s security program from the ground up—developing a resilient DevSecOps culture, embedding security into engineering workflows, and aligning security frameworks with business goals.I successfully led Fynd to achieve **ISO 27001:2013 certification** within just six months, demonstrating our commitment to structured governance and risk controls. Additionally, I drove **SOC 2 Type 1 & Type 2 attestation for PixelBin.io, platform.fynd.com & strengthening customer trust in our data handling practices.One of my key responsibilities includes leading the secure migration from **AWS to GCP**, implementing best practices in cloud security and compliance. I own and operationalize compliance with **SOC 2, ISO 27001, and CIS Benchmarks**, ensuring security is deeply integrated into all business functions and development pipelines.I’ve established enterprise-wide information security governance, developed scalable security programs, and promoted a strong culture of awareness and risk ownership across teams. My leadership ensures that security is not only a technical mandate but a core business enabler.**Key Focus Areas**:* Security Strategy & Governance* Risk Management & Regulatory Compliance* DevSecOps Enablement* Cloud Security (AWS & GCP)* SOC 2, GDPR & ISO 27001 Ownership* Security Awareness & Culture* Business Continuity & DR* Vulnerability & Threat Management

Education

• Nagpur University

  BE, mechanical

  1999 — 2003

• Indian Institute of Management, Calcutta

  Senior Management Programme