Ajay Bamzai

We are responsible and ensure our effort are prioritized with right balance and ambition to achieve company’s vision and goals.

Leadership Role As a part of leadership team in UK EMEA responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. As a manager Information Security, ensuring in identifying threat vectors in the process of developing, implementing new technology, business cases and day to day Operations and ensuring mitigation plan are 100% implemented. Assure adherence to Risk & Control, Compliance standards, direct support to Global IT Risk. Ensuring Infosec policy policy/standards are followed with due diligence in all projects. Develop periodic goals and to manage and motivate team members towards the goals set, high performance team with awards and ongoing training as per latest technologies. Problem Management Relationship Management Conducting Infosec mentoring secession for Cyber security awareness across engineering centre. Motivated Team Lead possessing excellent leadership and planning abilities. Focused on delivering high-quality products on tight schedules. Monitors, trains, and encourages employees to improve skills and meet demanding targets. History of successfully developing and managing strong teams through proactive training and issue management. Dedicated Team Leader with expertise in quality assurance initiatives, issue resolution and interpersonal communication. Proficient with project management, personnel training and production scheduling. Sets example for work ethic, punctuality and quality.

• CISA, 05/01/18
• CISM, 05/01/21
• CISSP, 05/01/17
• AWS Cloud Security, 02/01/18
• ISO27001:2022, 04/01/24

• Audit life cycle and engage stakeholders on control requirement, Issue management and end to end mitigation plan and closure.
• Finding Management: Working with control owner on acceptance and mitigation plan and updating leadership of findings and remediation status with corrective action plan duly documented.
• Control testing and continuous monitoring of technical controls to ensure what ‘we say is what we do’.
• Responsible for providing guidance and oversight of the first line of defense.
• Auditing at enterprise level as well as product level covering non-technical/technical controls.
• Leading Technical control like Change Management, Access Management, Network controls, SDLC controls, BC-DR, Vulnerability management using OWASP top 10 principles.
• Datacenter specific Audit – Physical and logical Access, CCTV review, periodic access review and validations and periodic maintenance of utilities.
• Cloud: Control gap assessment of services/application hosted over cloud infrastructure covering access management/logging and monitoring, BC-DR, Cryptography.

• Enterprise level audit of Core datacenters (03) in US.
• Service level audit of service/application as per contractual obligation covering RTP Hub- Real time payment – APAC/LAC region.
• Zaap services covering Pay by account and pay by bank hosted from APAC datacenters.
• FCS – Financial crime solution services hosted from Europe datacenters.
• Core Financial services hosted from US based datacenters.

• As SME well versed in Policy framework/Risk Assessment/Auditing Methodologies and approach to information security policies and standards and familiar with GRC tools.
• Deep understanding of control framework ISO27001/SOC1&2/PCI DSS/ISAE3000.
• Strong articulated based approach and consensus building skills with control owners.
• Facilitate cross-functional review and controls across multiple business units.
• Experience in delivering presentations and engaging with senior leadership.
• Knowledge of laws, regulations, policies and ethics as they relate to cyber security and ITSM (e.g. GDPR, FBA, CBA, PFMI).

Graduate Degree, B-Tech in computer engineering, 1st Division (74%), 2000-2004

• English
• Hindi
• Kashmiri

Team Lead Manager, Mastercard, London, England, 03/01/23

• Total Experience: 15+ years
• Passport Number: K9919898
• Passport Expiry Date: 12/31/23
• Date of Birth: 10/20/85

• First ISO27001 Certification for MasterCard for 03 DC's in US.
• Lead ISO Audit for Financial Crime Solutions.