Open to opportunities

Aniket Rastogi

@aniketrastogi

Message

Cybersecurity and technology risk leader building AI-governed enterprise assurance.

India

Message

What I'm looking for

I’m looking to help organizations securely adopt emerging technologies by strengthening governance maturity, operational resilience, and risk-informed decision making—building scalable, executive-ready assurance programs for cyber, technology risk, and AI governance.

I’m a technology risk and cyber governance leader with 14+ years driving enterprise security assurance, regulatory compliance, and operational resilience across global technology and financial organizations. I focus on translating complex risk into actionable control improvement through governance frameworks, risk-informed decision making, and board-level reporting.

In my recent role, I directed enterprise cyber risk and technology assurance initiatives, driving remediation of 300+ control observations and strengthening control maturity and compliance across large-scale environments. I designed and operationalized executive and board-level reporting frameworks, and led assurance across cloud platforms, DevOps pipelines, IAM controls, infrastructure domains, and messaging/storage security.

I also built AI governance and assurance capabilities, including an AI-powered platform that automates security, technology risk, governance, and compliance assessments using autonomous discovery and contextual analysis. I established enterprise AI governance that supported secure adoption across 200+ enterprise use cases, delivering continuous governance improvements to 15 customer-facing agentic AI solutions, while aligning to frameworks like SOX ITGC, PSD2, GDPR, and MAS Technology Risk Management.

Experience

Work history, roles, and key accomplishments

Current

Lead Global Cyber Risk Audits

Current

Uber Technologies

Dec 2019 - Present (6 years 7 months)

Directed enterprise-wide cyber risk, technology assurance, and regulatory compliance initiatives, driving remediation of 300+ control observations and improving control maturity and operational resilience. Established executive and board-level reporting and led technology risk assurance across cloud, Dev-Ops, GenAI/agentic AI, IAM, infrastructure, and data/storage platforms.

Cyber Risk Regulatory Compliance Board Reporting PSD2 GDPR AWS GCP Generative AI Agentic AI AI Governance IAM OAuth OIDC SAML Data Governance Kubernetes Docker Kafka MySQL Cassandra DynamoDB Executive Reporting

Security and Technology Risk Officer

Wells Fargo

Jun 2017 - Nov 2019 (2 years 5 months)

Led security governance and compliance assurance reviews across 50+ payment applications, strengthening PCI-DSS alignment and control consistency. Managed technology risk policy governance in the Second Line of Defense and standardized risk assessment using COBIT 5 mapped controls, reducing assessment cycle time by 25%.

Security Governance Compliance Assurance PCI DSS Second Line Of Defense COBIT 5 FFIEC OCC Issue Management IAM Mitigation Tracking SLA Remediation Closure

Technology Governance Program Lead

Deutsche Bank

Dec 2015 - Jun 2017 (1 year 6 months)

Established and managed an enterprise Shadow IT governance program covering 5,000+ previously unauthorized assets, improving visibility, control effectiveness, and data quality. Developed reporting and data reconciliation controls to improve inventory completeness to 98% and delivered executive dashboards and technology risk reviews aligned to MAS TRM and BaFin requirements.

IT Governance Data Quality Data Reconciliation Exception Management Root Cause Analysis Tableau Technology Risk MAS Technology Risk Management BaFin Control Reports

Technology Risk Advisor

KPMG India

Apr 2014 - Dec 2015 (1 year 8 months)

Led technology risk, IT SOX, and control assurance engagements for 20+ enterprise clients, validating IT general controls and application security. Delivered SOC 1 and SOC 2 Type II attestations and ISO 27001 readiness assessments, and performed ERP control assessments and third-party/vendor risk assessments.

Technology Risk IT SOX IT General Controls Application Security SOC SOC II ISO 27001 SAP ECC Oracle EBS

Sr. Associate Consultant

Infosys Limited

May 2012 - Apr 2014 (1 year 11 months)

Developed security policies, procedures, and enterprise management reporting frameworks based on ISO 27001, COBIT, and NIST CSF for BFSI and telecom clients. Conducted security reviews for private cloud deployments against APRA CPS 234 and CPS 230 requirements and contributed to cloud migration security architecture recommendations for multi-layer enterprise applications.