Abhilash Gujar

J'ai dirigé et coordonné des consultants externes en cybersécurité pour des projets multi-entités, garantissant ainsi la qualité des évaluations des risques et des mesures correctives. J'ai défini et mis en œuvre une stratégie de sécurité globale pour des clients en Europe et en Asie-Pacifique, couvrant la sécurité des produits, le cloud, l'infrastructure, la protection des données et les risques d'entreprise. J'ai agi en tant que RSSI externalisé pour des entreprises technologiques en phase de démarrage et de croissance, conseillant les fondateurs et les conseils d'administration sur les cyber-risques, la maturité en matière de conformité et les priorités d'investissement. J'ai influencé les principaux décideurs (PDG, directeurs techniques et investisseurs) sur la posture face aux cyber-risques, l'allocation budgétaire et la stratégie de résilience à long terme. J'ai façonné une culture de sécurité à l'échelle de l'organisation grâce à des programmes de sensibilisation ciblés, du coaching de leadership et des améliorations comportementales mesurables. J'ai supervisé les partenaires externes en cybersécurité pour les évaluations des risques, l'intégration des outils et les audits de conformité, garantissant le respect des SLA et la responsabilisation. J'ai conçu et piloté des programmes de sécurité transversaux couvrant le cycle de vie du développement logiciel sécurisé (SDLC), le DevSecOps, la préparation à la réponse aux incidents et la gouvernance de la confidentialité des données. Conseil en architecture GRC évolutive pour une plateforme CRM européenne leader (Salesforce), avec harmonisation des contrôles et des flux d'audit. Conception d'un référentiel de sécurité personnalisé pour un client sud-coréen, couvrant : Opérations de sécurité cloud, Détection des anomalies et réponse aux incidents, et Intégration sécurisée de l'IA

Spearheaded end-to-end execution of a global security risk assessment program across 30+ entities (Tier 1 to 3) spanning Europe, US, UK, Middle East, and Asia-Pacific, driving enterprise-wide risk mitigation and compliance alignment. Served as trusted security risk advisor to senior leadership and cross-functional stakeholders, bridging AXA Group Operations and global entities to embed security-by-design into 50+ high-impact projects. RAG Model (To name few projects - Claims Processing Automation, Risk Assessment and Underwriting, Policy Recommendations, Customer Retention Analysis, etc,.). Played a pivotal role in guiding the development of Risk Cartography for the AXA Group and its global entities. Pioneered the development and adoption of AXA’s first AI Risk Governance Framework, harmonizing regional regulations (GDPR, CCPA, DORA), industry standards (NIST CSF 2.0, ISO 27001, NIS2), and business objectives to enable secure, ethical AI innovation across 5+ markets. Directed enterprise-wide AI security oversight, conducting risk assessments for 50+ AI-driven initiatives and advising C-suite on emerging threat landscapes, model vulnerabilities, and mitigation strategies. Act as a key advisor for implementation of TPRM. Championed security as a strategic enabler, fostering partnerships between Group Operations and entities to elevate cyber resilience, reduce critical vulnerabilities, and align security posture with AXA’s global digital transformation. Other Key Activities: Led the development of a Monte Carlo simulation framework to quantify cybersecurity risk exposure under uncertainty, driving more resilient strategic planning. I built a dynamic Risk Barometer for security incidents, enabling real-time prioritization and executive-level decision support. Leveraging the MITRE ATT&CK framework, I designed a PAM prioritization model to optimize threat mitigation across privileged access pathways. Additionally, I co-authored an internal AI Risk Position Paper

Work with some of the best leaders in the industry. Build secure and sustainable cybersecurity capabilities... Identify solutions to cultural differences in cybersecurity practices. Find solutions to improvise on a legacy approach to cybersecurity... Work to bring new dimensions to risk management... Led 18 global Information Security Risk Committees, driving 15% improvement in security scores Increased stakeholder transparency by 20% through improved reporting and communication channels. Pioneered application of Reinforcement Learning in cyber threat detection, implementing 3 successful use cases while reducing MTSB control gaps by 20% ahead of schedule Orchestrating Cloud Security: Led the development and implementation of advanced security protocols for multi-cloud environments, leveraging tools such as AWS Security Hub and Azure Security Center. Additionally supported the developement of a strategic RACI matrix to clearly define roles and responsibilities across digital and cloud operations Led the successful implementation of the Third-Party Risk Management (TPRM) and security scoring platform (BitSight) for one of France's largest financial institutions, enhancing visibility into vendor risk profiles and strengthening overall cybersecurity posture. Additionally, spearheaded the development of a robust Privilege Management Framework using MITRE ATT&CK Framework, securing buy-in from the steering committee by demonstrating its critical role in mitigating access-related risks and ensuring compliance with regulatory standards.

Championing Incident Response: Lead cross-functional incident response teams using SIEM tools like Splunk and QRadar to proactively identify and neutralize Indicators of Compromise (IoCs). Optimizing IAM Strategies: Architect and deploy Single Sign-On (SSO), LDAP, OAuth2, and Multi-Factor Authentication (MFA) solutions to ensure robust identity and access management. Advancing Threat Intelligence: Utilize platforms such as Recorded Future and Cyber HUMINT to analyze real-time threat data and refine cybersecurity strategies. Promoting Zero Trust Architecture: Advocate for and implement Zero Trust principles to enhance supply chain security and protect enterprise ecosystems. Prepared the organization for regulatory audits across multiple jurisdictions including MAS, OCC, and UAE Central Bank requirements. I developed a detailed remediation plan with clear ownership and timelines. I conducted mock audits and interview preparation sessions with key stakeholders to ensure everyone was ready to demonstrate compliance effectively

Driving DevSecOps Integration: Foster the adoption of DevSecOps practices, integrating security into CI/CD pipelines with tools like Jenkins and Terraform. Enhancing Data Protection: Establish data encryption and DLP (Data Loss Prevention) policies using AES, RSA standards and platforms like Symantec DLP. Leading Vulnerability Management: Direct vulnerability assessments using tools like Nessus and Qualys to ensure system resilience and compliance. Pioneered a Revolutionary Approach to Securing the SWIFT Infrastructure, Eliminating the Possibility of Extreme Low-Probability Exposures

Clients: Ministry of Defence (MoD)-UK; NHS; European Space Agency (ESA); Swiss Federal Railways (SBB)

Clients: Reserve Bank of India; Bill Desk (Largest payment gateway); Corporation Banks

Technical Support Engineer