Abhilash Gujar

Driving the delivery of multi-agent AI projects tailored for cybersecurity business applications. Taking on diverse roles to architect, lead, and scale the innovative Cyber Agentic AI initiative. Successfully negotiated and secured three consecutive high-value deals, reducing vendor costs by 40% below market rates and achieving substantial profit margin growth. Recent Project Accomplishments: -> Demonstrated successful bypass of Microsoft Copilot and OpenAI LLM guardrails using roleplay and prompt injection techniques, leading to unauthorized disclosure of restricted model outputs during red team evaluation -> Advised on scalable GRC architecture for a leading European CRM platform (Sales Forces), aligning controls and audit workflows. -> Led the design of a custom security benchmark for a South Korean client, covering: Cloud Security Operations & Policy Anomaly Detection & Incident Response GenAI Risk Management & Secure AI Integration

Spearheaded end-to-end execution of a global security risk assessment program across 30+ entities (Tier 1 to 3) spanning Europe, US, UK, Middle East, and Asia-Pacific, driving enterprise-wide risk mitigation and compliance alignment. Served as trusted security risk advisor to senior leadership and cross-functional stakeholders, bridging AXA Group Operations and global entities to embed security-by-design into 50+ high-impact projects. RAG Model (To name few projects - Claims Processing Automation, Risk Assessment and Underwriting, Policy Recommendations, Customer Retention Analysis, etc,.). Played a pivotal role in guiding the development of Risk Cartography for the AXA Group and its global entities. Pioneered the development and adoption of AXA’s first AI Risk Governance Framework, harmonizing regional regulations (GDPR, CCPA, DORA), industry standards (NIST CSF 2.0, ISO 27001, NIS2), and business objectives to enable secure, ethical AI innovation across 5+ markets. Directed enterprise-wide AI security oversight, conducting risk assessments for 50+ AI-driven initiatives and advising C-suite on emerging threat landscapes, model vulnerabilities, and mitigation strategies. Act as a key advisor for implementation of TPRM. Championed security as a strategic enabler, fostering partnerships between Group Operations and entities to elevate cyber resilience, reduce critical vulnerabilities, and align security posture with AXA’s global digital transformation.

Work with some of the best leaders in the industry. Build secure and sustainable cybersecurity capabilities... Identify solutions to cultural differences in cybersecurity practices. Find solutions to improvise on a legacy approach to cybersecurity... Work to bring new dimensions to risk management... Led 18 global Information Security Risk Committees, driving 15% improvement in security scores Increased stakeholder transparency by 20% through improved reporting and communication channels. Pioneered application of Reinforcement Learning in cyber threat detection, implementing 3 successful use cases while reducing MTSB control gaps by 20% ahead of schedule Orchestrating Cloud Security: Led the development and implementation of advanced security protocols for multi-cloud environments, leveraging tools such as AWS Security Hub and Azure Security Center. Additionally supported the developement of a strategic RACI matrix to clearly define roles and responsibilities across digital and cloud operations Led the successful implementation of the Third-Party Risk Management (TPRM) and security scoring platform (BitSight) for one of France's largest financial institutions, enhancing visibility into vendor risk profiles and strengthening overall cybersecurity posture. Additionally, spearheaded the development of a robust Privilege Management Framework using MITRE ATT&CK Framework, securing buy-in from the steering committee by demonstrating its critical role in mitigating access-related risks and ensuring compliance with regulatory standards.

Championing Incident Response: Lead cross-functional incident response teams using SIEM tools like Splunk and QRadar to proactively identify and neutralize Indicators of Compromise (IoCs). Optimizing IAM Strategies: Architect and deploy Single Sign-On (SSO), LDAP, OAuth2, and Multi-Factor Authentication (MFA) solutions to ensure robust identity and access management. Advancing Threat Intelligence: Utilize platforms such as Recorded Future and Cyber HUMINT to analyze real-time threat data and refine cybersecurity strategies. Promoting Zero Trust Architecture: Advocate for and implement Zero Trust principles to enhance supply chain security and protect enterprise ecosystems. Prepared the organization for regulatory audits across multiple jurisdictions including MAS, OCC, and UAE Central Bank requirements. I developed a detailed remediation plan with clear ownership and timelines. I conducted mock audits and interview preparation sessions with key stakeholders to ensure everyone was ready to demonstrate compliance effectively

Driving DevSecOps Integration: Foster the adoption of DevSecOps practices, integrating security into CI/CD pipelines with tools like Jenkins and Terraform. Enhancing Data Protection: Establish data encryption and DLP (Data Loss Prevention) policies using AES, RSA standards and platforms like Symantec DLP. Leading Vulnerability Management: Direct vulnerability assessments using tools like Nessus and Qualys to ensure system resilience and compliance. Pioneered a Revolutionary Approach to Securing the SWIFT Infrastructure, Eliminating the Possibility of Extreme Low-Probability Exposures

Clients: Ministry of Defence (MoD)-UK; NHS; European Space Agency (ESA); Swiss Federal Railways (SBB)

Clients: Reserve Bank of India; Bill Desk (Largest payment gateway); Corporation Banks

Skills: Solution-oriented · Industry standards · Intrusion Detection · Root Cause Analysis · MBCI

Skills: Root Cause Analysis

Technical Support Engineer