Rajat S. Saha
Advisor - Cyber Security & GRC
Summary
Cybersecurity and GRC professional with over 15+ years leading cybersecurity strategy, compliance, and database management. Proven track record achieving ISO 27001 certifications, GDPR compliance, and fostering information security culture. AWS Certified Solution Architect specializing in secure cloud infrastructure design with expertise in risk management, security frameworks, and security solution implementation across diverse industries including banking, logistics, and IT.
Skills
Experience
Provides strategic cybersecurity advisory and GRC services, focusing on enhancing organizational security posture through ISO 27001, GDPR, and ISMS framework implementation. Works cross-functionally to address vulnerabilities, evaluate security solutions, and cultivate strong security culture through mentorship and policy development. Oversees IT operations alignment with security objectives and integrates Change Management with CI/CD pipelines while managing vendor relationships.
- Enhanced cybersecurity posture by implementing ISO 27001, GDPR, and ISMS frameworks
- Collaborated with cross-functional teams to address security vulnerabilities and optimize processes
- Evaluated and implemented new security solutions
- Provided strategic cybersecurity guidance throughout project lifecycles
- Cultivated a strong security culture by mentoring team members and advising leadership
- Overlooked IT operations to ensure alignment with security objectives
- Liaised with vendors to maintain secure partnerships
- Developed and maintained IT security policies, procedures, and checklists
- Integrated Change Management with CI/CD pipelines
- Established KRI & KPI metrics
Led high-value cybersecurity engagements in the Financial Sector, specializing in IS Audit, Cybersecurity Framework Review, and Risk Assessment aligned with ISO 27001 and regulatory standards for Banking and NBFC sectors across UAE, KSA, and India. Served as Cybersecurity SME providing expert guidance to leadership, overseeing project governance, resource management, and reviewing critical infrastructure and security documentation to ensure compliance.
- Led high-value client engagements in the Financial Sector, overseeing project governance and resource management
- Specialized in IS Audit, Cybersecurity Framework Review, Risk Assessment, and Audits aligned with ISO 27001 and regulatory standards for Banking and NBFC sectors
- Served as a Cybersecurity SME, providing expert guidance and mentorship to leadership and team members
- Reviewed critical infrastructure, cryptography, and SDLC documentation to ensure security compliance
- Conducted IS Audits for banks & NBFCs in UAE, KSA & India
Provided specialized cybersecurity consulting services focused on security solution implementations and assessments. Specialized in PAM/PIM, Endpoint Protection, Vulnerability Management, and SIEM deployments for various clients across different industries.
- Delivered independent cybersecurity consulting services for diverse clients
- Implemented PAM/PIM, Endpoint Protection, Vulnerability Management & SIEM solutions
Designed and implemented robust Cybersecurity Architecture in collaboration with Enterprise Infrastructure team, deploying critical security solutions on AWS Cloud including QualysGuard, Symantec Endpoint Protection, and LogRhythm SIEM. Led security tool migrations, strengthened security posture against ransomware threats, and promoted automation to streamline incident response. Also served as Senior Technologist optimizing SOX audit processes and managing over 500 Oracle and MSSQL databases.
- Designed and implemented a robust Cybersecurity Architecture in collaboration with the Enterprise Infrastructure team
- Deployed critical security solutions including QualysGuard, Symantec Endpoint Protection, and LogRhythm SIEM on AWS Cloud
- Strengthened security posture by mitigating ransomware threats and migrating to Thycotic PAM
- Promoted automation and collaboration to streamline incident response and enhance operational efficiency
- Optimized SOX audit process for Oracle databases using homegrown tools and Tripwire
- Streamlined database operations by automating cloning processes, reducing TAT by 53%
- Managed and administered over 500 Oracle and MSSQL databases, including installations, migrations, upgrades, and replication setups
Maintained and optimized Oracle 9i databases hosted on Sun Solaris for Investment Banking applications. Provided critical database support ensuring system stability and reliability through effective management of problem and release cycles.
- Maintained and optimized Oracle 9i databases hosted on Sun Solaris
- Provided critical database support for Investment Banking applications
- Managed problem and release cycles to ensure system stability and reliability
Provided system and network support services ensuring operational efficiency and technical troubleshooting for organizational infrastructure.
