Looking for a job

Arun Nag

@arunnag

Cybersecurity Manager at Actian, a division of HCLSoftware, leading security governance, cloud risk, and AI governance.

At Actian, a division of HCLSoftware, I lead the enterprise cybersecurity program across the product portfolio, aligning security initiatives with ISO/IEC 27001 and SOC 2. I also lead cloud risk and governance work, and report security metrics and risk recommendations to senior leadership.

I lead security and governance for internal AI tooling, including ISO/IEC 42001 audit readiness and AI risk reviews. Previously, at Nova Scotia Health Authority, I led security assessments aligned with the NIST Cybersecurity Framework and completed privacy impact assessments for a legacy application ahead of its cloud migration.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Manager, Technology Security

Current

Actian

Apr 2024 - Present (2 years 6 months)

Leads the enterprise cybersecurity program across the product portfolio, aligning with ISO/IEC 27001, SOC 2, and regulatory requirements. Oversees cloud security, ISMS, audit readiness, incident response, third-party risk, and AI governance.

Sr. Cybersecurity Risk Analyst

Nova Scotia Health Authority

Feb 2022 - Mar 2024 (2 years 1 month)

Participated in information security governance, maintained policies, and led risk assessments aligned with NIST CSF. Responded to incidents, monitored threats, and supported business continuity and privacy impact assessments.

NIST Cybersecurity Framework Risk Assessment Incident Response Threat Monitoring Business Continuity Security Testing Vulnerability Assessment Privacy Impact Assessment Policy Management Security Awareness

Cybersecurity Analyst

Nova Scotia Power

Sep 2019 - Jan 2022 (2 years 4 months)

Developed and implemented security policies and programs for on-premises and cloud assets. Participated in incident response, SIEM integration, vulnerability assessments, and audit response.

Security Policies Incident Response Forensics SIEM ArcSight Vulnerability Assessment Penetration Testing Threat and Risk Assessment NERC CIP IT General Controls Metrics And Reporting

System Administrator

Unisys Inc.

Feb 2017 - Aug 2019 (2 years 6 months)

Led migration to Microsoft Azure and implemented security controls. Managed Linux/Windows administration, backup and disaster recovery, and compliance support.

Azure Security Controls FOIPOP Linux Administrator Windows Administration Patching Backup And Recovery Veeam Microsoft Compliance Center Root Cause Analysis Confluence

System Administrator Sr. Consultant

NTT DATA Inc.

Aug 2015 - Jan 2017 (1 year 5 months)

Administered and hardened Red Hat Linux servers, automated tasks with scripts, and conducted security audits and vulnerability assessments. Monitored performance with Nagios and Zabbix.