Open to opportunities

Vivek M

@vivekm

Strategic cybersecurity leader driving compliance, risk management and security maturity across public and transport sectors.

Australia

Message

What I'm looking for

I am seeking senior security roles where I can lead governance, compliance and risk programs, mentor teams, collaborate with executives, and drive measurable maturity improvements.

I am a strategic cybersecurity leader with 15+ years' experience embedding security governance, compliance and risk management across public sector, transport and engineering domains.

I have led enterprise-wide programs aligning practices to VPDSS, ISO 27001, NIST CSF and departmental policies, and driven sector-wide maturity uplift for hundreds of funded agencies.

My strengths include stakeholder engagement with executives, drafting and updating information security frameworks and policies, and delivering assurance programs, incident response exercises, and awareness campaigns.

I contribute to professional standards bodies and certification committees, and have a proven track record of translating complex standards into actionable frameworks that improve security posture and enable informed executive decision-making.

Experience

Work history, roles, and key accomplishments

Current

Principal Cybersecurity Lead

Current

Department of Families, Fairness and Housing

Sep 2023 - Present (2 years 1 month)

Led uplift of cybersecurity maturity across 900 funded agencies, aligned practices with VPDSS, ISO 27001 and NIST CSF, and drove annual VPDSS attestation for 20+ portfolio entities while implementing awareness campaigns and incident tabletop exercises.

Security Governance Risk Assessment Incident Response Security Awareness Policy Development Compliance Management

Information Security Advisor

Yarra Trams

Jul 2022 - Sep 2023 (1 year 2 months)

Developed cybersecurity policies and an assurance program aligned to VPDSS, ISO 27001 and Essential Eight; led VPDSS attestation, phishing simulations, incident response exercises and InfoSec metrics dashboarding to improve organisational readiness.

ISO 27001 Vulnerability Management EDR Security Metrics

Governance, Privacy and Solution Specialist

OneTrust

Nov 2021 - Jun 2022 (7 months)

Delivered OneTrust GRC and privacy solutions including product demos to CxOs, implementation workshops, configuration, integrations and deployment, and produced SOWs and training materials to support sales and delivery.

GRC Privacy Management Product Demos Implementation SOW Stakeholder Engagement

IT Assurance Manager - GRC

Worley

Dec 2018 - Oct 2021 (2 years 10 months)

Led IT assurance across EMEA and US, conducted third-party risk assessments, built an audit universe to identify control gaps, and supported ISO 27001 certification while implementing IT KPIs and regional cybersecurity training.

IT Assurance ISO 27001 Audit Management KPIs

Assistant Manager - IT Security

Aviva Asia

Nov 2017 - Nov 2018 (1 year)

Developed cybersecurity governance frameworks and controls using Archer GRC, established a Cybersecurity Committee, strengthened identity and access governance and formalised vulnerability management and penetration testing procedures.

Security Governance Archer GRC IAM Vulnerability Management Penetration Testing Policy Development

Principal Consultant

GRC Partners Asia

Aug 2010 - Nov 2017 (7 years 3 months)

Led delivery of cybersecurity and ITSM assurance engagements across Southeast Asia, implemented ISO 27001/20000 and CMMI frameworks, managed GRC tool delivery and led a team of 15+ consultants to drive compliance and process improvements.

ISO 27001 GRC Tooling Audit Process Improvement Stakeholder Management Team Leadership

Principal Consultant

ECCI Consultancy

Jun 2006 - Aug 2010 (4 years 2 months)

Delivered end-to-end governance, risk and compliance programs including gap assessments, policy development, CMMI SCAMPI-A support and training, leading a team advising clients across Malaysia, Philippines and Vietnam.

ISO 27001 ITIL Policy Development Training