# Anjdeep Gumani

Anjdeep Gumani is a remote worker on Himalayas, Cyber Security Sector Lead (Director) at BAE Systems Digital Intelligence, based in United Arab Emirates.

Source: https://himalayas.app/@anjdeepgumani

```text
Cyber Security Director at BAE Systems Digital Intelligence who built A&O Shearman’s global GRC capability and secured an £800k resilience budget.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | United Arab Emirates |
| Authorized to work in | United Arab Emirates |
| Salary expectations | 120k+ GBP |
| Job categories | Cybersecurity Director |
| Skills | Security Governance Risk and Compliance, Cybersecurity Strategy, Board and Audit Committee, Enterprise Risk Management, Regulatory Compliance, Regulatory Frameworks, EU UK Compliance, ISO 27001, SOC2, SWIFT CSP Assessment, Third Party Risk Management, Supply Chain Risk Management, Cybersecurity Assurance, Cyber Maturity, Security Architecture |
| LinkedIn | https://linkedin.com/in/anjdeep |

## About

```text
At A&O Shearman, I built a global GRC capability from an inherited three-person team as Interim Global Head of GRC and Deputy CISO. I led teams of up to nine across five countries and supported the CISO in scaling the wider security function beyond 15 staff.

I led the ISO/IEC 27001:2022 re-certification, achieving zero findings, and secured an £800k Board-approved ransomware resilience budget. I also reduced third-party assessment turnaround by 50% across a 150+ supplier programme and cut audit preparation effort by over 40% while retaining full domain coverage.

At BAE Systems Digital Intelligence, I provide director-level security leadership and assurance across financial services, government and defence. My work includes leading assurance for a UK Government Azure-based platform, directing security architects on a multinational defence federation, and delivering cyber security assessments and readiness toolkits across the GCC.
```

## Experience

### Cyber Security Sector Lead (Director) (current)

[BAE Systems Digital Intelligence](https://himalayas.app/companies/bae-systems). Apr 2019 - Present

```text
Director-level consulting CISO providing security leadership, assurance and governance advisory across financial services, government and defence. Currently leading the practice's audit and assurance methodology revamp.
```

Skills: Security-Assurance, Threat-Modeling, STRIDE-Model, NIST-CSF, ISO-27001, SWIFT-CSP-Compliance, FAIR, Vulnerability-Management, Cloud-Security, Azure, PKI, Cryptography, DORA

### Interim Global Head of GRC & Deputy CISO

A&O Shearman. Jan 2022 - Dec 2024

```text
Owned governance, risk and compliance for a global law firm, deputising for the CISO. Built a full GRC capability, achieved zero findings at ISO 27001 re-certification, and secured an £800k ransomware resilience budget.
```

Skills: GRC, ISO-27001, SOC2, CyberArk, Azure-AD, Microsoft-Entra, BitSight, Power-BI, Risk-Management, Third-Party-Risk, Incident-Response, AI-Security

### Head of Cyber Security (Business Development)

[Sopra Steria](https://himalayas.app/companies/sopra-steria). May 2017 - Apr 2019

```text
Scaled the cyber security practice from 2 specialists to 15 within two years. Directed a 12-month SOC maturity programme and launched four market-ready propositions.
```

Skills: Cybersecurity, SOC, LogRhythm, IBM-QRadar, Cyber-Maturity, GDPR, Business-Development, Team-Leadership

### Senior Manager, Cyber Risk

[Deloitte](https://himalayas.app/companies/deloitte-ireland). May 2016 - May 2017

```text
Led a £4m+ security transformation for Lloyds Banking Group and delivered cyber security audits for the FCA and Beazley Group.
```

Skills: Cybersecurity, Audit, Risk-Management, Transformation, Stakeholder-Management

### Executive Advisor, Information Protection

[KPMG](https://himalayas.app/companies/kpmg-india). Jan 2014 - Apr 2016

```text
Delivered a £2.5m cyber strategy review for JP Morgan and Investec, and managed a malware incident for an international travel agency.
```

Skills: Cybersecurity-Strategy, NIST, Incident-Management, Cyber-Maturity, Underwriting, Risk-Management

### Information Security Manager (VP)

[Societe Generale CIB](https://himalayas.app/companies/sg-americas-operational-services-llc). Dec 2011 - Dec 2013

```text
Regional information security owner for the UK and 8 EMEA countries, covering information risk, third-party risk, application security, data loss prevention and awareness.
```

Skills: Information-Risk-Management, Third-Party-Risk, Application-Security, Data-Loss-Prevention, Segregation-of-Duties, Privacy-Impact-Assessment, FSA, FCA, PRA

### Operational Risk Manager

[Societe Generale CIB](https://himalayas.app/companies/sg-americas-operational-services-llc). Jan 2010 - Dec 2011

```text
Risk consultant to Middle Office, HR, COO, Finance and IT, coordinating Risk Control Self-Assessments.
```

Skills: Operational-Risk, Control-Self-Assessment, Consulting

### Team Lead, GRC

[BlackBerry](https://himalayas.app/companies/blackberry). Jan 2007 - Dec 2010

```text
Owned UK ISO 27001 certification, designed and chaired governance forums, acted as EMEA lead auditor across four countries, and performed PCI DSS gap analysis.
```

Skills: ISO-27001, Governance, Audit, PCI-DSS, GRC

## Education

### Royal Holloway, University of London

MSc, Information Security

```text
MSc in Information Security from Royal Holloway, University of London.
```

### University of Mauritius

BEng (Hons), Computer Science & Engineering

```text
BEng (Hons) in Computer Science & Engineering from the University of Mauritius.
```

## Tech stack

- BitSight
- Power BI
- Microsoft 365
- Azure

To contact Anjdeep, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Afeef Veetil](https://himalayas.app/@afeefveetil): Head of Information Security, Invest Bank
- [PRINCE AFSAR](https://himalayas.app/@princeafsar): Information Security Consultant, SecureTech LLC
- [James Dennis](https://himalayas.app/@jamesdennis): Security Engineer II, Microsoft
- [Khalid Yacoob](https://himalayas.app/@khalidyacoob): Director of Business Development, Hivemind
- [Shafiq Ahmed](https://himalayas.app/@shafiqahmed2): Manager Cybersecurity Risk, Abu Dhabi Commercial Bank
- [Guy Martin](https://himalayas.app/@guymartin): VP Information Security, ConnectWise
- [Abdulla Almarzouqi](https://himalayas.app/@abdullaalmarzouqi): Cybersecurity Office Lead, General Civil Aviation Authority
- [Utkarsh Singh](https://himalayas.app/@utkarshsingh16): Senior Security Consultant, Dell Technologies
- [mohamed elhabashy](https://himalayas.app/@mohamedelhabashy): Group Information Security Manager, PayTabs
- [Luciano Ciattaglia](https://himalayas.app/@lucianociattaglia): Information Security Officer, Wio Bank PJSC