Open to opportunities

Yuvaraaj D

@yuvaraajd

Message

Experienced Chief Information Security Officer with a proven track record.

India

Message

What I'm looking for

I am seeking a role that allows me to lead security initiatives and drive risk management strategies while fostering a culture of security awareness.

I am an accomplished Chief Information Security Officer (CISO) with extensive experience in leading enterprise security strategies, risk management, and compliance initiatives. My career has been marked by a commitment to developing and implementing comprehensive security policies that effectively mitigate risks and enhance incident response efforts. I take pride in my ability to align security initiatives with business objectives, ensuring the protection of valuable assets while maintaining seamless operations.

Throughout my tenure, I have directed the design and implementation of robust information security management systems, achieving ISO 27001 certification. My leadership in conducting regular security audits and assessments has been pivotal in identifying vulnerabilities and ensuring timely remediation. I have successfully led incident response teams, minimizing the impact of cybersecurity incidents and significantly reducing security incidents by 40% over three years through a comprehensive cybersecurity strategy.

In my previous roles, I have developed enterprise security architectures and technology roadmaps, spearheaded risk management programs, and implemented best practices for IT security. My collaborative approach with cross-functional teams has enabled the integration of security measures into IT and business operations, fostering a culture of security awareness across organizations.

Experience

Work history, roles, and key accomplishments

Current

Chief Information Security Officer

Current

Exafluence

Apr 2024 - Present (2 years 2 months)

As CISO at Exafluence, I lead the enterprise security strategy, risk management, and compliance efforts. I directed the design and implementation of the ISMS, earning ISO 27001 certification, and reduced security incidents by 40% over three years through a comprehensive cybersecurity strategy.

Risk Management Compliance Incident Response Policy Development Threat Intelligence Leadership Governance Technical Proficiency Time Management

Current

Chief Information Security Officer

Current

Exafluence Global Analytics

Apr 2024 - Present (2 years 2 months)

Implemented a Data Loss Prevention program to significantly reduce enterprise data leakage, and managed company-wide security design, product selection, and tool deployment for a 100% migration. Negotiated and rolled out new antivirus and endpoint protection, built a vulnerability management team, and partnered with legal and executives to codify security processes and improve incident response.

Data Loss Prevention Endpoint Protection Vulnerability Management Incident Response Security Operations Center (SOC)Budget Management Risk & Compliance Advisory

IT Security Manager

Cholamandalam MS General Insurance

Jul 2022 - Apr 2024 (1 year 9 months)

In my role as IT Security Manager, I developed the information security strategy and enterprise security architecture. I led risk and security projects, implemented ITSM practices, and conducted security awareness training, significantly enhancing the organization's security posture.

Risk Management Incident Management Security Architecture ITSM Security Awareness Vulnerability Management Change Management Cloud Security

Information Security Manager

Cholamandalam MS General Insurance

Jul 2022 - Apr 2024 (1 year 9 months)

Developed enterprise information security strategy, security architecture, and technology roadmap, and led risk, PII/privacy, vulnerability management, and incident management programs. Drove GRC deliverables including SOX ITGC audit support, SOC2 reporting, and ISO 27001 audit activities, while implementing security solutions (e.g., DLP, SIEM, PAM, and firewalls) and secure practices across the S

Information Security Strategy Enterprise Security Architecture Risk Management Vulnerability Management ITSM & Security Dashboards Secure SDLC Practices SIEM

Sr Information Security Analyst

Quess Corp

Feb 2015 - Jul 2022 (7 years 5 months)

As a Senior Information Security Analyst at Quess Corp, I focused on assessing security gaps, performing IT and SOC reviews, and ensuring compliance with security policies and standards. I played a key role in implementing security solutions and conducting audits.

Security Auditing Compliance Vulnerability Management Risk Assessment Security Solutions Implementation Incident Response Compliance Policies

Sr. Analyst

Scope International

Jul 2013 - Feb 2015 (1 year 7 months)

In my position as a Senior Analyst at Scope International, I was responsible for analyzing security protocols and ensuring compliance with industry standards. I contributed to various security projects and collaborated with teams to enhance overall security measures.

Security Analysis Compliance Risk Management Collaboration Security Protocols Incident Management Vulnerability Assessment Policy Development Security Awareness

Sr. Analyst

Sutherland Global Services

Jul 2007 - Feb 2013 (5 years 7 months)

As a Senior Analyst at Sutherland Global Services, I focused on security analysis and risk management. I was involved in developing security policies and conducting audits to ensure compliance with established standards.