Satish Korde

• Lead enterprise cybersecurity risk management, conducting risk assessments, interpreting findings, and guiding strategies to strengthen security posture and align with business objectives. • Drive exception management and issue resolution, performing risk evaluations, ensuring governance compliance, and mentoring teams toward risk-aware decision-making. • Oversee Third-Party Risk Management (TPRM), evaluating vendor security, reviewing contracts for compliance gaps, and implementing mitigation strategies to reduce exposure. • Advise executive leadership on policy governance, regulatory compliance, and strategic risk mitigation, ensuring alignment with NIST, ISO 27001, and industry standards. • Direct enterprise cybersecurity awareness initiatives, including campaigns on AI-driven threats, phishing, and Deepfake attacks, fostering a culture of continuous improvement. • Provide strategic oversight and reporting on critical risks, operational resilience, and compliance metrics, enabling informed decision-making and accountability across security operations.

• Directed enterprise-wide cybersecurity governance, formulating and enforcing information security policies aligned with ISO 27001, PCI-DSS, NIST, GDPR, and organizational strategy. • Spearheaded security audit and compliance programs, ensuring alignment with SAMA Cybersecurity Framework, PDPL, and UAE Data Protection regulations. • Led Third-Party Risk Management (TPRM) and Business Continuity governance, enhancing resilience of internal and vendor ecosystems and mission-critical services. • Conducted internal cybersecurity audits across delivery accounts and vendor engagements, driving risk visibility, control effectiveness, and contractual compliance. • Provided strategic oversight for security and data protection risk assessments on new solutions and business opportunities, mitigating risks prior to client onboarding and supporting secure growth. • Led threat modeling and security architecture reviews for on-premises and cloud applications, including DFD design and secure solution integration. • Delivered board-level reporting, executive summaries, and dashboards, covering enterprise risks, security posture, audit compliance progress, and key cybersecurity initiatives. • Directed security awareness programs, developing and delivering training, campaigns, and communications to strengthen security culture and align employee behavior with regulatory and business requirements.

• Led enterprise-wide cybersecurity and risk management, designing frameworks for security, BC/DR, and regulatory compliance. • Directed audit, compliance, and third-party risk programs, ensuring alignment with ISO 27001, RBI Cybersecurity Framework, CSITE, and PCI-DSS. • Advised executive leadership on risk mitigation strategies, driving successful audit outcomes and strengthening organizational resilience. • Oversaw security assessments and remediation initiatives, enhancing enterprise risk posture across retail and corporate banking. • Provided board-level reporting and dashboards, enabling informed decisions and fostering a security-conscious culture through awareness programs.

• Managed end-to-end security assessment projects, ensuring risk identification and remediation across IT and application environments. • Conducted enterprise vulnerability assessments (DAST/SAST) and guided secure SDLC adoption. • Mentored and upskilled security teams to ensure SLA compliance and audit readiness. • Collaborated with development, infrastructure, and business teams to remediate vulnerabilities and strengthen security posture.

• Monitored SIEM alerts, investigated security incidents, and ensured SLA-aligned incident response. • Conducted vulnerability scans and collaborated with stakeholders to remediate security gaps. • Prepared incident reports and dashboards for management and audit tracking.

• Installed, configured, and maintained Windows systems, firewalls, and network devices (switches, routers). • Troubleshot LAN/WAN connectivity issues and documented configurations, incidents, and data backups. • Assisted users with IT and network support, ensuring secure and reliable operations.