Looking for a job

Milap Oza

@milapoza

Message

DVP – GRC at IndusInd Bank, directing enterprise-wide GRC frameworks and strengthening operational resilience.

India

Message

What I'm looking for

I’m looking to lead security initiatives, drive continuous improvement, and foster a culture of security awareness.

At IndusInd Bank, I direct enterprise-wide Governance, Risk, and Compliance frameworks and contribute to the Critical Incident and Change Control team to improve operational resilience.

At CSB Bank, I developed an information security risk management framework, assessed risks across the organization, and managed third-party vendor risk. I also led security policy development and presented risk assessment reports to senior management.

At Jio, I defined vulnerability assessment processes and conducted internal and external penetration testing across infrastructure. Earlier, at Azpired, I supported ISO 27001 and PCI DSS compliance through security controls, risk assessments, and audits.

Experience

Work history, roles, and key accomplishments

Current

DVP – GRC

Current

IndusInd Bank

Jul 2025 - Present (1 year 3 months)

Directed enterprise-wide Governance, Risk, and Compliance (GRC) frameworks, ensuring robust internal controls and regulatory alignment. Oversaw system changes through a structured change control process and contributed to the Critical Incident and Change Control (CICO) team.

GRC Risk Management Compliance Change Control Process documentation SOPs Cross Functional Collaboration Incident Management

AVP – Information Security Risk

CSB Bank

Jul 2024 - Jun 2025 (11 months)

Developed and implemented a comprehensive information security risk management framework, including regular risk assessments and mitigation strategies. Ensured compliance with industry regulations (including RBI) and internal security policies.

Information Security and Risk Management Risk Assessment Regulatory Compliance Vendor Risk Management Policy Development Reporting

Sr. Manager – Information Security Risk

HDFC Bank

Jan 2023 - Jun 2024 (1 year 5 months)

Conducted end-to-end risk assessment processes and detailed reporting to top management. Developed and implemented a risk-based audit approach to address financial and operational risks.

Risk Assessment Risk Management Audit Compliance Evidence Tracking Cloud Computing On Premise Reporting

Sr. Manager – Information Security SOC- VAPT

Jio Platforms Ltd

Oct 2017 - Dec 2022 (5 years 2 months)

Conducted and defined vulnerability assessment processes to identify, analyze, prioritize, and mitigate vulnerabilities across Jio infrastructure. Performed internal and external penetration testing and managed the vulnerability management lifecycle.

Vulnerability Assessment Penetration Testing Tenable.Sc Vulnerability Management Windows Unix Linux Network Security

Information Security Manager

Azpired (eBusinessBPO)

Apr 2016 - Jul 2017 (1 year 3 months)

Updated security policies and implemented security controls as per ISO 27001:2013 standard. Performed risk assessments, internal audits, and supported compliance requirements including PCI DSS and HIPAA.

ISO 27001 PCI DSS HIPAA Risk Assessment Internal Audit Security Policies Vulnerability Scanning Penetration Testing Data Protection

Information Security Officer

Motif Infotech (TTEC)

May 2014 - Apr 2015 (11 months)

Facilitated security research and analysis, enabling business continuity for client computing systems and network infrastructure. Monitored and responded to incidents, and established risk management and treatment plans.

SIEM Intrusion Detection Intrusion Prevention Malware Analysis Risk Management Vulnerability Assessment Security Awareness

Information Security Consultant and Trainer

Appin Technology Lab

Feb 2011 - Apr 2014 (3 years 2 months)

Facilitated information security, ethical hacking, and computer forensic training to students, professionals, and organizations. Collaborated with third parties to perform vulnerability tests and implement cost-effective security solutions.

Infosec Ethical Hacking Computer Forensics Training Vulnerability Testing Security Solutions