Summary
Overview
Work History
Education
Skills
Certification
Affiliations
Timeline
AdministrativeAssistant
Pravin Bhavsar

Pravin Bhavsar

MUMBAI

Summary

Highly experienced IT Risk professional in the Central Banking and Finance sector, with a proven track record of 15+ years of experience in various domains of Information Security and Cyber Security. Recognized for expertise in Cyber Security Audits, Policy making, compliance, and implementation of effective security measures. Possesses specialized certifications such as CISSP, CISM, CRISC. Trained for management of information and cyber security for financial organizations. Demonstrates proficiency in Vulnerability Assessment and Penetration Testing (VAPT), conducting thorough assessments of systems, services, and related technology. Skilled in Threat Hunting, utilizing advanced techniques to proactively search for potential threats and mitigate risks. Proficient in Security Tools and Technologies, employing cutting-edge solutions to enhance information security. Deep understanding of Compliance and Regulatory requirements, ensuring adherence to industry standards and regulations. Strong background in Risk Management, assessing risks, developing mitigation strategies, and implementing risk management frameworks. Dedicated to upholding the highest standards of Information Security and safeguarding critical assets.

Overview

17
17
years of professional experience
1
1
Certificate

Work History

Deputy General Manager

Reserve Bank of India
2010.12 - Current
  • Ey Responsibilities and Experience
  • Cyber Security Audits of Commercial Banks and other financial Institutes
  • Overseeing and leading execution of rigorous Cyber Security Audits for Commercial Banks and other Financial Institutes, ensuring adherence to regulatory and industry standard compliance.
  • Assessing security infrastructure and practices of regulated entities, evaluating potential vulnerabilities, and formulating robust strategies for risk mitigation.
  • Collaborating with internal teams and external stakeholders to implement cybersecurity best practices, standards, and regulations, contributing to enhancement of financial industry's overall cybersecurity resilience.
  • Developing and maintaining regulatory policies and guidelines to uphold cybersecurity standards for financial sector, in line with national and international cybersecurity frameworks.
  • Engaging in ongoing monitoring and assessment of emerging cyber threats and vulnerabilities, offering timely guidance and recommendations to strengthen financial sector's cybersecurity defenses.
  • Serving as subject matter expert in cybersecurity, providing valuable insights to regulatory bodies, banks, and financial institutions to foster secure and resilient financial ecosystem.
  • Facilitating training and awareness programs to ensure that regulated entities are well-informed and prepared to meet cybersecurity challenges effectively.
  • Collaborating with RBI's executive leadership to devise and implement comprehensive cybersecurity framework that aligns with Reserve Bank's mission of safeguarding financial stability and fostering economic growth.
  • Contributing to development and implementation of cybersecurity regulations, initiatives, and standards that enhance resilience of banking and financial sector in face of evolving cyber threats.
  • Developed Cyber Security Framework for commercial banks supervised by Reserve Bank of India:
  • Spearheaded development of comprehensive Cyber Security Framework for commercial banks under supervision of Reserve Bank of India (RBI).
  • Collaborated with industry experts, stakeholders, and internal teams to design and implement robust framework that addressed emerging cyber threats in banking sector
  • Lead team of auditors for Cyber Security Audits:
  • Led team of auditors responsible for conducting IT examinations and cyber security audits for banks and supervised entities.
  • · Developed audit methodologies and procedures to evaluate effectiveness of cyber security controls and information security risk management practices.
  • Conducted IT Audit of 100+ banks and supervised entities:
  • · Conducted thorough IT audits of more than 100 banks and Financial institutes.
  • · Evaluated various aspects, including information security risk, cyber security readiness, effectiveness of cyber security infrastructure, IT governance, and compliance with regulatory guidelines.
  • Collaborated with industry experts and regulators to establish best practices and standards for cyber security in banking sector.
  • Prepared Strategy for Reserve Bank of India on 'Risk-Based Assessment' for Cyber Security Audits
  • Conducted review of card payment security compliance of Banks during Cyber Security Audits.
  • Developed and implemented Risk-Based Supervision (RBS) scoring model and reporting tool.
  • Throughout my tenure, I consistently demonstrated strong commitment to enhancing cyber security practices and ensuring he integrity of banking system in line with regulatory requirements.

Associate – Business Analyst Group

SS&C GlobeOp Financial Services India Pvt, Ltd
2009.12 - 2010.12

Associate – Localization Engineer

LionBridge Technologies Private Limited
2006.12 - 2007.08

Education

Master of Management Studies - Finance

University of Mumbai
05.2009

Bachelor of Engineering - Information Technology

University of Mumbai
05.2006

Diploma - Cyber Law

Government Law College
05.2018

Skills

  • Information Security
  • Compliance and Regulatory Knowledge
  • Risk Management
  • Security Auditing and Compliance
  • Effective leader
  • Consistently meet goals
  • Efficient multi-tasker
  • Project Management

Certification

Certified Information Systems Security Professional (CISSP), ISC2, # 663969


Certified Information Security Manager (CISM), ISACA, # 2053398


Certified in Risk and Information Systems Control (CRISC), ISACA, # 2130765


Certified Ethical Hacker CEH V9, EC-Council,

# ECC86538504750


Certificate of Cloud Security Knowledge (CCSK), Cloud Security Alliance

Affiliations

1. ISC2

2. Member of ISC2 APAC event planning committee

3. ISACA

Timeline

Deputy General Manager

Reserve Bank of India
2010.12 - Current

Associate – Business Analyst Group

SS&C GlobeOp Financial Services India Pvt, Ltd
2009.12 - 2010.12

Associate – Localization Engineer

LionBridge Technologies Private Limited
2006.12 - 2007.08

Master of Management Studies - Finance

University of Mumbai

Bachelor of Engineering - Information Technology

University of Mumbai

Diploma - Cyber Law

Government Law College

Certified Information Systems Security Professional (CISSP), ISC2, # 663969


Certified Information Security Manager (CISM), ISACA, # 2053398


Certified in Risk and Information Systems Control (CRISC), ISACA, # 2130765


Certified Ethical Hacker CEH V9, EC-Council,

# ECC86538504750


Certificate of Cloud Security Knowledge (CCSK), Cloud Security Alliance

Pravin Bhavsar