Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic
Anchal Johri

Anchal Johri

Cyber Security Manager

Summary

Dynamic Cyber Security Manager with extensive experience in incident response, threat detection, and risk management. Proven expertise in identifying, investigating, and mitigating complex security incidents to strengthen enterprise security posture.

Holds a Master’s degree in Computer Science along with globally recognized certifications, including CISSP, GCIH, SSCP, ISO 27001:2013 Lead Auditor, and Microsoft Azure Fundamentals.

Overview

9
9
years of professional experience
5
5
Certifications

Work History

Cyber Security Manager

BCG
08.2023 - Current
  • Lead high-severity incident response efforts, managing complex cases involving malware, phishing, unauthorized access, and advanced persistent threats.
  • Drive proactive threat hunting initiatives and utilize threat intelligence to detect, analyze, and respond to emerging cyber threats.
  • Oversee threat detection strategy by collaborating with vendors on use case lifecycle management, including tuning and whitelisting.
  • Leverage tools such as SIEM, EDR, CNAPP, Zscaler, and email gateways to monitor events, identify detection gaps, investigate anomalies, and conduct root cause analysis.
  • Develop and maintain incident response playbooks, SOPs, and ServiceNow knowledge base articles to streamline investigation workflows.
  • Collaborate with the Red Team on Red and Purple Team exercises and actively participate in tabletop simulations to enhance incident response preparedness and threat detection capabilities.
  • Communicate complex technical issues to executive leadership in a clear and actionable manner.
  • Prepare executive and technical reports for major incidents, including end-to-end ownership from identification to remediation and lessons learned.
  • Lead quality and performance reviews of analysts, ensuring consistent and effective incident handling.
  • Conduct training sessions and provide mentorship to new team members to promote knowledge sharing and operational readiness.
  • Partner with cross-functional teams to implement different processes.
  • Translate leadership requirements into actionable metrics and dashboards to support strategic decision-making.
  • Take a proactive approach to identifying security control gaps and recommending enhancements to prevent potential incidents.

Cyber Incident Response Lead

NCR Corporation
01.2019 - 08.2023
  • Acting as Incident Commander and Subject Matter Expert during major security incidents.
  • Managing and responding to security alerts from EDR, email security, IDS/IPS, Chronicle Backstory, Microsoft Defender, and other sources.
  • Developing playbooks and designing automation workflows for security incident response.
  • Engaging in proactive threat hunting to identify potential threats.
  • Tuning and optimizing security detection rules for improved accuracy.
  • Providing recommendations for enabling new alerting mechanisms.
  • Preparing and presenting reports for management on security posture and incidents.
  • Training and mentoring new team members on processes and best practices.

IT Risk Analyst

NCR Corporation
01.2017 - 12.2019
  • Conducting thorough risk evaluations to ensure proper assessment and mitigation.
  • Preparing and delivering management reports on risk-related activities and findings.
  • Performing risk assessments aligned with standards such as ISO and GDPR.
  • Designing and implementing a NIST-based Risk Management Framework using the ServiceNow GRC tool.

Security Specialist

NCR Corporation
08.2016 - 12.2016
  • Monitoring and responding to spam-related security incidents.
  • Supporting the implementation and configuration of CyberArk for privileged access management.

Intern

NCG Corporation
02.2016 - 07.2016

Education

Masters of Computer Application(MCA) - Computer Applications

CDAC
Noida, India
04.2001 -

Bachelor of Computer Applications(BCA) - Computer Applications

IMS
Noida, India
04.2001 -

Skills

    SOC

    Cyber Incident Response

    Threat Hunting

    Threat Intelligence

    Incident Handler

    Blue Team

    Management Reporting

    CSIRT

    CDC

Certification

GIAC Certified Incident Handler (GCIH)

Timeline

GIAC Certified Incident Handler (GCIH)

10-2024

Microsoft Certified: Azure Fundamentals

08-2024

Cyber Security Manager

BCG
08.2023 - Current

Certified Information Systems Security Professional(CISSP)

02-2023

Systems Security Certified Practitioner (SSCP)

10-2020

Cyber Incident Response Lead

NCR Corporation
01.2019 - 08.2023

Lead Auditor Information Security Management Systems (ISMS) (BSI ISO/IEC 27001:2013)

02-2018

IT Risk Analyst

NCR Corporation
01.2017 - 12.2019

Security Specialist

NCR Corporation
08.2016 - 12.2016

Intern

NCG Corporation
02.2016 - 07.2016

Masters of Computer Application(MCA) - Computer Applications

CDAC
04.2001 -

Bachelor of Computer Applications(BCA) - Computer Applications

IMS
04.2001 -
Anchal JohriCyber Security Manager