Open to opportunities

avishek maitra

@avishekmaitra

Message

Senior Cybersecurity leader specializing in architecture, risk management, and global security programs.

India

Message

What I'm looking for

I seek senior roles where I can lead security architecture, vendor risk, and GRC programs in collaborative, growth-focused organizations driving enterprise resilience and compliance.

I am a results-driven cybersecurity leader with over 10 years of experience building and leading enterprise security programs, architecture, and risk management functions across global organizations.

At FactSet I designed and automated a Global Third-Party Vendor Risk Management program, led SOC 2 Type 2 attestation for a $100M core business, implemented collective control frameworks (CIS Top 20, NIST 800-53, NIST CSF, ISO 27001) and introduced AI-driven vendor assessments and AI risk management practices.

I lead cross-functional teams and deliver security transformation initiatives including ISO 27001 and SOC 2 readiness, security awareness programs, automated unified risk register workflows, and vendor/tool onboarding while partnering with auditors and vendors to strengthen enterprise resilience.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Architect

Current

FactSet Research Systems

Jan 2020 - Present (5 years 9 months)

Led design and automation of the Global Third-Party Vendor Risk Management Program and drove SOC 2 Type 2 readiness for a $100M ASV business, implemented unified risk registers and control frameworks (CIS, NIST, ISO) to strengthen enterprise security posture.

Vendor Risk Management SOC 2)ISO 27001 NIST CSF Security Architecture Risk Register

Analyst - Cybersecurity

HSBC

Apr 2019 - Jan 2020 (9 months)

Managed third-party security assessments and audit processes for regulated Indian entities, conducting vendor risk assessments against HSBC standards, NIST, PCI DSS and ISO 27001 and driving remediation and risk acceptance workflows.

NIST PCI DSS ISO 27001

Information Security Analyst

Olive Technology Ltd

Feb 2017 - Apr 2019 (2 years 2 months)

Owned end-to-end ISO/IEC 27001:2013 implementation and internal audits, introduced third-party risk management and automated application security testing in CI/CD, and improved backup resiliency via AWS Glacier/S3.

ISO 27001 Internal Audit Third Party Risk Management VAPT Security Awareness AWS S3

Analyst

HCL Technologies

Mar 2016 - Dec 2016 (9 months)

Coordinated server deployments and proactive monitoring for a 4,000+ server estate (Windows, Unix, VMware), triaged critical alerts and supported incident and change management processes.

Deployment Infrastructure Monitoring ServiceNow Incident Management

NOC Inbound (Fixed Term)

Amazon India

Aug 2015 - Feb 2016 (6 months)

Managed North America freight and transportation schedules, handled network exceptions and contingency planning, and coordinated stakeholders across fulfillment centers and delivery networks to maintain supply chain continuity.

Supply Chain Operations Contingency Plan Freight Management