Amit Sharma

Technology Strategy, Simplification & Execution: Implemented a digital-first roadmap, integrating cloud and digital capabilities across channels, platforms and core banking, that enhanced client experiences and reduced time to market. Led target state architecture driven transformation and consolidation of technology estate across a diverse stack delivering 60% higher digital capabilities while keeping operating costs near flat through tight cost control measures.

Resiliency & Stability: Achieved critical uptime (>99%) for essential services, employing a Site Reliability Engineering (SRE) approach to strengthen digital infrastructure.

Cost Optimization & Operational Efficiency: Spearheaded initiatives reducing operating costs by 10-12% through automation and process optimization.

Compliance, Risk Management & Cybersecurity: Enhanced cybersecurity practices and regulatory compliance, mitigating risks by modernizing legacy platforms and adopting cloud solutions.

Led enterprise security and Infrastructure across high-growth startups Starbucks, large BFSI (ICICI Bank), Telecom, Captive , Consulting

Defined and executed CISO strategy aligning risk, compliance, and resilience with business and digital transformation.

Established 24x7 SOC and incident response capabilities, improving detection and response performance.

Implemented Zero Trust and modern controls across cloud, applications, and enterprise platforms.

Secured large-scale AWS/Azure and hybrid environments; embedded security into engineering and release practices.

Led compliance programs (ISO 27001/27701, GDPR, PCI-DSS, SOX) with strong audit outcomes.

Delivered measurable risk reduction through security assessments, resilience exercises, and third-party risk governance.

Established security teams and governance to reduce operational risk across multiple DC and critical environments. Built and led AI Security capability; defined the AI Security strategy and guardrails for safe enterprise adoption.

Delivered enterprise cloud + application security programs, embedding controls into modern engineering and delivery practices. Designed and operationalized an end-to-end cyber risk and vulnerability management framework across cloud and hybrid environments.

Centralized vulnerability management for cloud/app workloads, enabling faster prioritization and remediation.

Directed threat modeling, security assessments, and risk-led defenses to proactively reduce exposure across critical platforms. Strengthened security operations and incident readiness, improving execution for high-severity incidents.

· Business Continuity and Air Gap Solution: Ensuring business continuity across the bank by leading and managing high availability architectures for critical banking applications including Core Banking, NEFT, RTGS, UPI, Forex, and major Tier0 applications, Heading the team responsible for the Colo Room (IRE), also known as the Vault Network Separated Solution, specifically designed to mitigate and respond to ransomware threats

· IT Operations: Measuring the SLA , SLA for application/Application uptime , Business continuity and maintaining RPO/RTO .Root cause analysis for critical issues , Change management , Service management , network management for data center .

Infrastructure optimization: Developed a data center optimization strategy and consolidated data centers into 2 within 6 months resulting in annual saves of over 1M Cloud adoption: Developed and executed strategy for leveraging public vs private cloud for both data center applications as well as end user compute requirements Expense and vendor management: Driving key expense management initiatives leading to over INR 1MN saves in capital and operating expenses by modernizing infrastructure

Responsible for data centers and IT estate across 500 Stores locations and 5,000+ end users for one of the largest Retail companies in India

Leading POS ( Point of Sales ) applications , SAP for Store inventory,forecasting,logistics and financial modules

Manage Storage Operations for 500+ Stores, stablsing the Support to help business, Network Management for 500 + locations, HO , Warehouses and Complex Airport env .

Network transformation from MPLS to SDWAN and move into SLA based ILL solution

Strategic leader responsible for strategy and execution including data center build out, cloud and virtualization. Manage a complex multivendor and partner environment.

Embedded security-by-design and Dev SecOps practices by integrating security controls throughout the CI/CD pipeline.

Established a centralized vulnerability management program, implementing SAST, DAST and automated security testing to improve secure software delivery.

Implemented cloud security controls and Zero Trust technologies, strengthening protection across cloud workloads, identities, and data.

Deployed key security platforms including CASB, DLP, data masking, and SOC technologies, enhancing visibility, prevention & response capabilities.

Designed and delivered enterprise security programs spanning cloud security, IT security, application security, compliance, and cyber defense.

nfrastructure optimization: Developed a data center optimization strategy and consolidated 3 data centers into 2 within 6 months resulting in annual saves of over 5M Cloud adoption: Developed and executed strategy for leveraging public vs private cloud for both data center applications as well as end user compute requirements

Datacenter Migration and Consolidation: Planning and solutioning and migration of 800 plus, CRM, Post-paid Prepaid, Seibel CRM and other Digital applications. Strategic planning and migration of critical data center catering 440 Mn customers for Vodafone Idea Ltd . Application migrations for 600 plus Critical application with Lift and Shift, logical migration and replication, cloud transformation for meeting business criticality, cost optimization Automation of workloads.

Zero Data Loss and Business continuity: Root cause analysis, Maintain Infra SLA, RPO and RTO and other business critical KPI , Managing Daily backup of 5 Petabytes , DR Drills for zero data loss and maintain business continuity, Building Storage resiliency with ( Dell , IBM , HP ,Eng , Exacc and other ) Store ones solutions.

Risk, Compliance and Audit: Adhering to Patching Cycle across all infra layer, rolling out yearly technical specification, performing regular red teaming and vulnerability assessment , getting into VA gaps Closer, Currency Upgrades, Patching and handling Security audits with respect to TRAI and DOT.

Directed offensive security programs, including threat-led penetration testing, red-team exercises, and bug bounty initiatives, to simulate real-world attack scenarios and improve resilience.

Established and operationalized a global 24x7 Security Operations Center (SOC), enhancing threat detection, monitoring, and incident response across regions.

Implemented enterprise security platforms including DLP, cloud security, firewalls, and endpoint controls, securing on- prem, cloud, and hybrid environments.

Responsible for Strategic leader responsible for strategy and execution including data center build out, cloud and virtualization.

Responsible to setup and grow data science shared service center of excellence for Mphasis Pune

Led regional IT security and risk governance teams across multiple geographies, strengthening security assessment, testing and assurance capabilities for global enterprise clients.

Planned and delivered enterprise security certifications, audits and assurance programs for IT services clients, embedding security resilience into core service offerings.

Directed security assessment and testing initiatives, including SAST, DAST, vulnerability assessments, penetration testing and threat hunting, producing actionable risk insights.

Defined and executed Business Continuity and Disaster Recovery (BCP/DR) strategies, leading cross-border incident management and recovery planning across four geographies.

Responsible for Strategized and implemented Business Continuity and Recovery plans for business units and internal support functions, improving organizational resilience and building the framework for Risk using NIST and ISO framework

Led the design and deployment of IT risk and security frameworks for banking and insurance clients, aligning information security controls with regulatory and contractual requirements.

· Headed information security assessments and internal audits, covering ISO 27001, BS 25999 (ISO 22301), SOX, HIPAA and COBIT, supported by a team of compliance and internal auditor

· Drove enterprise-wide implementation of BS 25999 (ISO 22301), strengthening business continuity and disaster recovery governance across the organization