Apurv Agarwal
Director - Product Security
Bengaluru,Karnataka
Summary
Senior IT executive with over two decades of experience focused on transforming organizational security and data protection capabilities and paradigms to meet current and upcoming cyber and digital security needs across diverse technology stacks.
Encouraging manager and analytical problem-solver with talents for team building, leading and motivating, as well as excellent customer relations aptitude and relationship-building skills.
Overview
22
22
years of professional experience
4
4
years of post-secondary education
10
10
Certifications
Work History
Director – Product Security
SAP Labs India Pvt Ltd.
Bengaluru
07.2019 - Current
- Standards and Compliance : Implemented GxP for Life Science customers (such as Roche, Novartis, Bayer, Kite) and ISO 27001/ SOC 2 Type 2 controls for cloud services, as well responsible for product standards such as Data Protection and Privacy (EU-GDPR), EU-access, Audit logs monitoring. Used Automated Video (usage of Artificial Intelligence) for submission and presentation of evidence during ISO & SOC audits.
- Process Optimization : Harmonize the security processes such as Change Management, Risk management, Incident & Problem Management, User & Access Management, and Vendor assessment for SAP customers across global projects.
- Establish and lead risk management activities, including identification of risk and recommended mitigations; track and manage risks and issues from identification through closure.
- Optimized and automated security questionnaire process for vendor assessment before onboarding. Implemented Artificial Intelligence (AI) for assessment of compliance risk during vendor onboarding.
- Policy Development: Strong hands-on experience in Developing, reviewing and approving (being DoA) Policies, Standards and Procedures per organization's governance framework for the regulated LifeScience industry practices of GxP (Good documentation practices).
- Security: Supporting customers such as J&J, Arla CFA, Bristol-Myers with Data Protection Agreements and Technical Organizational Measures (TOMs)
- Leadership and Coordination : Coordinated project activities, provided leadership in coaching/mentoring teams, and served as POC for CISA, Security Legal, ECA, BTP compliance team on contractual changes to reduce risk.
- Collaboratively worked with the BISO & CISO of Cybersecurity Operations to establish & implement industry leading operational practices/methodologies.
- Cultivated and strengthened lasting client relationships using strong issue resolution and dynamic communication skills.
- Artificial Intelligence Focus: Managed AI risks and ensured responsible AI usage using the NIST AI Risk Management Framework
Quality Management Lead (India)
SAP Labs India Pvt Ltd.
Bengaluru
09.2014 - 07.2019
- Project Management and Client Interaction:
- Executed large program in Vietnam and South East Asia to support customers such as Novaland and Vincity and improved margin from negative to +30% profitable project before closure.
- De-escalated Cargill project by evaluating issue related to Quality and modified rule-set for static code checks
- Supported customers such as Ultratech, Daimler, Helaba, Services Australia
- Standards and Compliance : Implemented Next generation test cases concept, and responsible for product standards such as Accessibility & Performance. Led topic like DevOps Setup using Jenkins as a Service model with multiple plugins and API/UI Automation through multiple tools like Selenium, Cucumber, UFT, TOSCA, JUnit, RestAPI, Postman.
- Quality and Testing : Designed, developed, and implemented quality procedures and software testing methodologies, conducted internal quality audits, and tracked project progress.
- Driven Initiative with Security team that helps perform automated application Vulnerability Assessment & Penetration Testing through usage of tools like AppScan, BurpSuite.
- Assessed customer feedback data, identifying opportunities for enhancing end-user experiences with company products or services through targeted improvements in quality management practices.
- Leadership and Coordination : Coordinated project activities, provided leadership in coaching/mentoring teams, and served as POC for ISO 9001 for Quality Center of excellence team. Consecutively got ISO 9001 certification for projects delivered without any non-conformities.
- Developed and executed comprehensive quality strategy across products (Testing and Automation), resulting in 40% improvement in product/service quality.
- Managed team of Quality Analysts, providing coaching and mentoring for professional development and improved performance outcomes.
- Led multidisciplinary team of 21 – Quality Experts in my responsibilities of managing People manager, overseeing Organizational quality initiatives implemented across SAP Product teams.
Project Manager
Huawei Technologies
Bengaluru
09.2006 - 09.2014
- Over period of 8 years, held positions of progressive responsibilities in customer enablement group to ensure consistent roll out of innovation products with over 95 percent satisfaction results
- Responsibilities included developing internal capabilities for agile and scrum development, automation testing as well as dynamic vulnerability assessment during roll outs to ensure future rollouts incorporate feedback with shorter feedback loop
- Built customized technology stack leveraging standard tools such as TOSCA, UFT and other custom bridge applications to enable shorter testing cycle with consistent results through automation
- Helped customers cut down their overall cost of implementation by 20% by enabling business component recycling through testing
- Implemented closed-loop corrective action system, resulting in 30% reduction year-on-year in customer complaints w.r.t Post release support issues and quality of software delivered
- Collaborated with R&D teams to ensure new product designs met quality and reliability requirements
- Focus on business development for south Asian markets to drive growth through customer satisfaction.
- Successfully managed multiple projects simultaneously by prioritizing tasks according to urgency, resource availability, and alignment with organizational goals.
Senior Software Engineer
Wipro Technologies
Bengaluru
07.2002 - 09.2006
- Key team member and lead to develop and deploy development and automation strategy across product life cycle
- Received "Defect Star Award" for finding highest number of defects during Verification cycle for Nortel systems.
- Part of support and development team to drive optimized solutions.
- Worked with project managers, developers, quality assurance and customers to resolve technical issues.
Education
Bachelor of Engineering -
Punjab Engineering College
Chandigarh 08.1997 - 06.2001
Skills
Product Security Strategy
Incident Response
Vulnerability Management
GxP for LifeSciences Industry Products
SDLC / SSDOL
Penetration Testing
Risk Assessment and Mitigation
Regulatory Compliance (GDPR, HIPAA)
ISO 27001, ISO 9001, NIST, C5
Test Management - Strategy & Execution
Agile Methodology, CI/CD, DevSecOps
Automation Tools & Framework - Unit, API, and UI
Cloud Operations
Legal and Regulatory Compliance
Teamwork and Collaboration
Policy Development and Enforcement
Certification
SANS GIAC Security Leadership Certification
Awards
- Awarded the “Role Model Leader of Year 2021”
- Won Star Leader award for 2017 at SAP Innovative Business Solutions.
- Been multiple time Star Performer (Catalyst) at SAP
- Won “HUAWEI – Gold Medal Award” in 2011 for the Best Customer Satisfaction.
- Won CSD Director Award from Headquarters for Continuous excellent support to Customer in LMT during 2010.
- Won the CRD-BL Innovation Workshop Award for Competency Development.
- Won the “COO Incentive Award” at HUAWEI Technologies for Cost Control Practices.
- Won the “COO Incentive Award” at HUAWEI Technologies for Effective Resource Utilization.
- Won the Innovator Award at HUAWEI for introducing new methodologies in Automation Script Design bringing overall efficiency of Test Automation
Confirmation
I hereby confirm that the above details furnished are correct to my knowledge.