Maragathavalli Arunachalam

At Capgemini, I serve as BU CISO for APAC and lead First Line of Defense work across information security, cyber resilience, and ICT risk. I translate regulatory requirements into practical risk-mitigation strategies for regulated financial services and payment domains.

I oversee security risk assessments across cloud services, distributed infrastructure, third-party providers, and technology delivery pipelines. I also coordinate incident and disruption response, remediation tracking, and resilience exercises.

As Deputy CISO for two business units, I guided security governance across financial-services accounts and supported regulatory reviews and audits under frameworks including DORA, GDPR, ISO 27001, SOC 1/2, and NIST CSF. I served as a principal risk assessor for proposals and client contracts, assessing solution security and regulatory requirements.

Earlier, I worked as an Associate Manager at Virtusa (Polaris consulting & services ltd), following testing roles at RM Education Solutions India, Maxartists Technologies, and Egalax Technologies. My certifications include CISM, ISO 27001:2022 Lead auditor, ISO 27005, ISO 31000, and ISO 42001 Lead Implementer.