Vijay K.

About Vijay K.

Accomplished GRC, Enterprise- Solutions Architect, Affluent experience with Artificial intelligence \"AI\" & Data Privacy Specialist with a robust history of orchestrating comprehensive governance, risk management, and compliance strategies. With 21+ years of hands-on experience, excelling in fortifying organizational security postures while ensuring adherence to regulatory frameworks such as ISO 27001, NIST Cybersecurity Framework, GDPR, and HIPAA, PCI-DSS alongside safeguarding data privacy. Proficient in conducting thorough risk assessments, devising tailored security frameworks aligned with industry best practices, and implementing proactive measures to mitigate vulnerabilities. Impressive track record of driving successful compliance audits against standards like PCI DSS, SOX, and SOC 2, DORA and partnering with cross-functional teams to achieve regulatory milestones efficiently. Adept at navigating intricate regulatory landscapes, and bringing nuanced understanding of evolving privacy laws and security standards to the table. Thrives in dynamic environments, leveraging strong analytical skills and strategic foresight to anticipate and address emerging threats. Poised to leverage this expertise to bolster an organization’s security, compliance, and privacy frameworks, while facilitating sustainable growth and resilience in an ever-evolving threat landscape.

Experience

1. Security Manager

   Citi

   Oct 2018 — Present · New Castle County, DE, US

   Strategic Oversight: Lead the execution of a global cybersecurity program with a focus on cloud security, AI/ML security, and regulatory compliance across diverse geographies and industries.• Governance & Compliance: Enforce enterprise-wide security governance aligned with ISO 27001, PCI-DSS, SOC 2 Type 2, CMMC L1–L3, ISO 42001, and CSA-CCM, ensuring adherence to international standards and frameworks.• Security Architecture: Design and manage security architecture for AI platforms, multi-cloud services (AWS, Azure, GCP), and hybrid environments, balancing innovation with resilience.• Cross-Functional Partnership: Collaborate with legal, compliance, engineering, and operations teams to uphold regulatory and contractual cybersecurity requirements worldwide.• AI/ML Threat Monitoring: Proactively monitor evolving threats to AI/ML models, safeguarding model integrity, confidentiality, and robustness against adversarial attacks.• Operational Excellence: Continuously enhance vulnerability management, security monitoring, and DevSecOps pipelines, embedding security into the software development lifecycle.• Vendor & Audit Management: Oversee relationships with cybersecurity vendors, consultants, and internal/external auditors, ensuring accountability and performance.• Culture & Awareness: Drive a cybersecurity-first culture through executive training, employee awareness programs, and global policy enforcement, fostering resilience at every organizational level.

Education

• Anjuman-I-Islams M.H. Saboo Siddik College of Engineering 8-Shephard Road Mumbai 400 008

  Bachelor's degree, Electrical and Electronics Engineering

  1998 — 2002

• Sikkim Manipal Institute of Technology - SMU

  Master's degree, Information Technology

  2007 — 2009