Kshitij Gunale

Vendor Management for VAPT Activities

• Coordinate with external vendors to conduct periodic Vulnerability Assessment and Penetration Testing (VAPT) across bank assets.
• Review and validate vendor reports for accuracy, completeness, and compliance with RBI guidelines.
• Ensure vendors follow industry-standard methodologies (OWASP, NIST, CVSS) while maintaining confidentiality and data security.

Regulatory Submissions & RBI Audit Support

• Prepare and submit RBI-mandated VAPT reports, closure documents, and compliance matrices.
• Serve as a liaison between vendors and internal teams during RBI audits, ensuring timely and accurate responses.
• Track and close audit observations related to VAPT and cybersecurity, maintaining comprehensive records of actions taken.

Security Governance & Risk Oversight

• Monitor remediation of vulnerabilities identified by vendors, ensuring timely closure and risk mitigation.
• Maintain documentation of cybersecurity posture, including risk registers, vulnerability dashboards, and remediation logs.
• Align VAPT activities with RBI’s Cyber Security Framework for Banks and other applicable regulatory standards.

Compliance & Reporting

• Ensure VAPT frequency and scope meet regulatory requirements (quarterly, half-yearly, or as mandated).
• Generate internal reports for senior management and compliance teams, providing actionable insights on vulnerabilities and risk exposure.
• Support Board-level reporting on cybersecurity metrics, VAPT outcomes, and risk management initiatives.

Collaboration & Stakeholder Engagement

• Work closely with IT, InfoSec, Risk, and Compliance teams to ensure VAPT findings are addressed and mitigated promptly.
• Actively engage stakeholders in remediation planning, risk prioritization, and process improvements to strengthen the bank’s security posture.

• Vulnerability Assessment & Configuration Audits: Conducted end-to-end VAPT, configuration audits, and PCI DSS ASV scans for BFSI and international clients using Tenable Security Center, ensuring CIS benchmark compliance and alignment with regulatory standards.
• Team Leadership & Mentorship: Managed and mentored teams of up to 17 consultants, facilitating training sessions, cross-training, and knowledge-sharing initiatives to enhance team technical proficiency and operational efficiency.
• Client Engagement & Advisory: Delivered actionable findings, reports, and strategic recommendations to clients and internal stakeholders, helping organizations improve security posture and risk mitigation strategies.
• Process Improvement & Innovation: Participated in continuous improvement initiatives, identifying operational gaps and providing innovative solutions.
• Training & Knowledge Development: Created training materials, prototypes, and SOPs, coaching team members on best practices, security frameworks, and client service standards.
• Cross-Functional Collaboration: Coordinated with multiple internal and external teams to resolve issues quickly, maintain operational continuity.
• Recognition & Achievements: Earned multiple client and organizational commendations for diligent efforts, technical expertise, and proactive risk management.

VAPT & Configuration Audit Specialist | 4 Years Experience

• Conducted end-to-end vulnerability assessments and configuration audits for BFSI clients using Tenable Security Center, ensuring 100% alignment with CIS benchmarks.
• Developed and implemented a custom vulnerability management tool, streamlining reporting, and improving leadership visibility on remediation progress.
• Coordinated scanning operations and vulnerability remediation, increasing team resolution efficiency by 40%.
• Delivered actionable findings and strategic recommendations to internal stakeholders and clients, supporting informed decision-making.
• Trained and mentored junior analysts , enhancing team productivity and technical proficiency.
• Conducted on-site observations and structured interviews to assess individual and team strengths, aligning tasks with skillsets for optimal performance.
• Ensured adherence to regulatory compliance standards and industry best practices (OWASP, NIST, CVSS) across all assessments.

Cybersecurity & VAPT Specialist | SOC & Client-Facing Experience

• Conducted regular user access reviews, significantly reducing exposure to insider threats and compromised accounts.
• Led 24/7 SOC assessment team, mitigating cyber risks through continuous vulnerability assessments and penetration testing using OWASP Top 10 and SANS 25 frameworks.
• Performed WAF analysis and tuning using Imperva WAF, strengthening web application security.
• Engaged directly with BFSI clients to plan and execute VAPT tasks, ensuring regulatory compliance and security best practices.
• Delivered VAPT, VLAN segmentation, and PCI DSS ASV scanning for international clients, ensuring robust security posture across diverse environments.
• Received multiple client and organizational commendations for diligence, insights, and proactive problem-solving.
• Managed multiple concurrent projects with strong attention to detail, organization, and strict adherence to deadlines, optimizing team productivity and client satisfaction.