Open to opportunities

Guru Prasad Patnaik

@guruprasadpatnaik

Message

Security and privacy leader with 17+ years building enterprise cybersecurity programs across global Fintech and SaaS.

India

Message

What I'm looking for

I’m looking for a leadership role where I can run security-by-design and DevSecOps, strengthen GRC and third-party risk, and drive AI governance—partnering with executives to turn compliance into measurable business risk reduction and resilience.

I’m a Head of Information Security & Privacy with 17+ years of experience building and scaling enterprise security programs for high-growth Fintech, SaaS, and digital platforms. I focus on reducing enterprise risk and improving audit outcomes across ISO 27001/22301/27701, SOC 2, GDPR/CCPA, DPDP, DORA, and NIS2.

I specialize in embedding security-by-design and DevSecOps across engineering and operational environments—shifting security left through code security and automated testing. I’ve architected and operationalized Secure Software Development Lifecycle (SSDLC) programs with automated SAST, SCA, and vulnerability management across CI/CD pipelines to enable risk-based remediation.

Across my roles, I’ve led security governance, security operations improvements, and third-party risk management. I’ve deployed SOAR-driven incident response orchestration to reduce MTTD/MTTR and implemented governance frameworks like DSR processing to ensure compliant data access, correction, portability, and deletion.

Currently, I’m driving AI governance to enable secure innovation—partnering with executive leadership to transform security from a compliance requirement into a strategic business enabler. I bring an outcome-led mindset through security KPIs, executive reporting, and practical security architecture that strengthens resilience in distributed, cloud-native environments.

Experience

Work history, roles, and key accomplishments

Head of Security & Privacy

MoEngage

Jan 2024 - Jan 2026 (2 years)

Spearheaded enterprise cybersecurity, privacy, and data protection strategy for a global SaaS platform, aligning governance and security programs with GDPR, CCPA, DPDP, and SOC 2. Embedded SSDLC with automated SAST/SCA and SOAR orchestration, reducing MTTD/MTTR by 40%, pre-production vulnerabilities by 83%, and delivering 100% SLA adherence for GDPR/CCPA DSRs.

GRC Secure Product Development Lifecycle (SSDLC)SAST SCA Open Source Risk

Director of Information Security

Indiavidual Learning Ltd

Jan 2021 - Jan 2024 (3 years)

Built and scaled the enterprise information security function from inception, establishing governance, controls, and security KPIs within 9 months. Integrated SAST into CI/CD to reduce security engineering rework by 25% and implemented CSPM to remediate critical/high cloud misconfigurations, while leading a 7-member security team.

Security Governance CSPM Cloud Security SAST Security Architecture

Information Security Specialist

Tink AB

Jan 2020 - Jan 2021 (1 year)

Helped build the Information Security GRC function for a scaling fintech/open-banking ecosystem, designing governance frameworks and risk assessment aligned to ISO 27001. Reduced security due-diligence questionnaire volume by 50% by delivering customer-facing assurance artifacts and implemented TPRM with tiered vendor risk classification.

ISO 27001 Security Governance Risk Assessment Security Assessments Security Questionnaires

Director of Information Security

Zeotap India Pvt. Ltd.

Jan 2016 - Jan 2020 (4 years)

Led enterprise information security and risk management across global operations, driving GDPR-aligned security and privacy frameworks and cross-border data governance. Operationalized DevSecOps and SSDLC practices, implemented CSPM to remediate cloud misconfigurations, and strengthened release/change governance to improve platform stability and audit preparedness.

DevSecOps Application Security Testing Cloud Governance