Open to opportunities

Rohit Malhotra

@rohitmalhotra

Message

Global cybersecurity and GRC executive driving risk-informed security programs.

United States

Message

What I'm looking for

I seek senior roles leading enterprise cyber risk, GRC, and third-party risk programs where I can modernize platforms, embed risk-informed decision-making, and partner with executives to measure business impact.

I am a cybersecurity and Governance, Risk & Compliance (GRC) executive with 24 years of progressive leadership across Fortune 500 enterprises, focused on aligning security initiatives with business objectives and enabling measurable risk-based decisions.

I have modernized enterprise cyber risk management by deploying next-generation GRC platforms (RSA Archer, OneTrust, SAFE, ServiceNow), automating risk quantification, policy exception workflows, and vendor risk assessments to accelerate executive decision-making.

I strengthened supply chain resilience by integrating AI/ML automation and continuous monitoring into third-party risk programs, halving vendor assessment timelines while optimizing SOX ITGC, PCI DSS, ISO 27001, GDPR, and SOC 2 compliance to improve audit efficiency and reduce operational disruption.

I partner with senior leaders and boards to deliver quantitative dashboards that link cyber risk to business impact, establish governance forums that embed accountability, and build global teams across GRC, risk analytics, audit, and supply chain security to sustain enterprise resiliency.

Experience

Work history, roles, and key accomplishments

Current

Director of Cyber Risk

Current

AbbVie

Jan 2022 - Present (4 years 1 month)

Directed enterprise-wide cyber risk and GRC strategy, modernizing GRC platforms and embedding risk-based decision-making to improve control adoption and compliance accuracy across global operations.

GRC Risk Management RSA Archer ServiceNow NIST CSF PCI ISO 27001 Vendor Risk Management

Vice President, GRC

Dun & Bradstreet

Jan 2018 - Jan 2022 (4 years)

Led global governance, risk and compliance operations, modernizing third-party risk and compliance programs with AI/ML automation to reduce vendor assessment timelines by 50% and improve audit efficiency.

AI ML SOX PCI DSS ISO 27001 GDPR

Global Head of IT Security

John Wiley & Sons

Jan 2012 - Dec 2016 (4 years 11 months)

Led IT security and compliance for US operations during e‑commerce transition, achieving PCI compliance within a year and delivering SOX audit with zero deficiencies while establishing vulnerability management programs.

PCI DSS Vulnerability Management Risk Assessment Security Policy Compliance Program Management Incident Response