Open to opportunities

Abhinav Sinha

@abhinavsinha2

Message

I lead enterprise cybersecurity programs, risk governance, and DevSecOps for regulated financial organizations.

India

Message

What I'm looking for

I'm open to global cybersecurity leadership opportunities where I can build and lead enterprise security programs, strengthen regulatory posture, manage risk, and enable secure business growth. I'm willing to relocate internationally.

I'm leading enterprise cybersecurity at Sarvagram, a regulated NBFC of approximately 3,000 employees, where I built the security function from the ground up and lead a 12+ member team. I own security strategy, governance, compliance, operations, vendor risk, incident response, and board-level risk reporting.

Previously, at Morgan Stanley, I led security governance across technology portfolios and helped reduce MTTR from 12 weeks to 6 weeks. I introduced 200+ security controls aligned with ISO 27001, PCI DSS, and NIST CSF while leading six security professionals.

My work also includes regulatory audits for 30+ RBI-regulated entities at ReBIT and vulnerability management at Atos, where active vulnerabilities fell from 60,000+ to fewer than five over two years. I focus on secure business growth through application security, cloud security, DevSecOps, technology risk, and GRC.

Experience

Work history, roles, and key accomplishments

Current

Chief Information Security Officer (CISO)

Current

Sarvagram

Apr 2026 - Present (4 months)

Leading enterprise-wide cybersecurity program for a regulated NBFC, owning security strategy, governance, and execution. Built security function from ground up, implementing DevSecOps practices and overhauling security policies.

Security Strategy DevSecOps SAST DAST Secure Code Review ISO 27001 PCI DSS Incident Response Vendor Risk Management Security Architecture Data Protection

Director – Security Architect

Morgan Stanley

Apr 2022 - Apr 2026 (4 years)

Led enterprise security governance across multiple technology portfolios, providing independent challenge on application security, cloud security, and technology risk. Reduced MTTR from 12 weeks to 6 weeks and introduced 200+ security controls.

Security Architecture Cloud Security DevSecOps Technology Risk ISO 27001 PCI DSS NIST CSF Risk Management Executive Reporting Team Leadership

Senior Auditor – Regulatory Cybersecurity

ReBIT

Aug 2020 - Apr 2022 (1 year 8 months)

Conducted regulatory cybersecurity audits for 30+ RBI-regulated entities, identifying 1000+ findings and driving regulatory actions. Authored and reviewed 50+ audit reports, improving reporting efficiency by 75%.

Control Assessment Audit Reporting

Security Engineer

Atos India Limited

Jul 2017 - Aug 2020 (3 years 1 month)

Led enterprise vulnerability management program, reducing active vulnerabilities from 60,000+ to less than 5 over two years. Performed application security testing aligned to OWASP Top 10.

Vulnerability Management Application Security OWASP Top 10 Burp suite Nmap Metasploit PCI DSS

Security Engineer

Infosys Limited

May 2014 - Oct 2017 (3 years 5 months)

Performed vulnerability assessments and system hardening across enterprise environments. Implemented security controls using Group Policy and automated testing processes using Selenium and Java.

Vulnerability Assessment System Hardening Group Policy Selenium Java Automation