Saurabh Nigam
Head of Security Operations
Navi-Mumbai
The way to get started is to quit talking and begin doing.
Walt Disney
Summary
Cybersecurity operations leader with 20+ years of experience managing 24x7 global teams, incident response and rapidly improving detection capabilities against the latest threat actor techniques. Forward-thinking and strategic leader recognized for cost-effective system improvements, operational streamlining and positive leadership style.
Overview
20
20
years of professional experience
2
2
Certificates
4
4
Languages
4
4
years of post-secondary education
Work History
Head of Security Operations
MSCI Inc.
Mumbai
11.2016 - Current
- Directed a global cybersecurity operations function of 29 employees, overseeing Security Operations Centre (SOC), incident response, vulnerability management and other functions.
- Oversaw a $1M annual reduction in SIEM operational costs through intelligent log piping and storage, while preserving and improving monitoring capabilities.
- Built a training and certification program for security operations staff to improve their fundamental knowledge in operating system, network, AI/LLM, cloud and database technologies.
- As a member of the CISO Executive Team, managed the transition of cyber strategy from compliance-oriented controls to a threat-led (MITRE ATT&CK) strategy. The program scored in the 88% percentile in red/purple team simulated attacks when compared to 100+ other firms.
- Led an operations review across regional sites, reducing security incidents by 40%.
- Designed and implemented a unified incident response protocol, achieving 95% compliance rate against service level objectives, a dramatic improvement compared with prior years.
- Supervised vulnerability management improvements that reduced per-host vulnerabilities to fewer than ten, achieving aggressive remediation timelines.
- Managing regulatory and compliance obligations such as NIST, SOX, SOC Type 1 and Type 2, EU-BMR, ISO 27001, adhering to the PDCA cycle.
Delivery Manager- SOC
Paladion Networks (India)
05.2015 - 11.2016
- Built and maintained delivery capacity aligned with revenue plans, ensuring the right mix of skills, bench strength, and cross-training.
- Developed team capabilities through training on practices, OEM solutions, and services, while driving performance management and career planning.
- Oversaw project delivery with effective resource allocation, technical governance, and escalation management.
- Drove innovation adoption, ensured quality and compliance, executed strategic portfolio planning, and achieved target delivery margins.
Sr. Information Security Consultant
Paladion Networks (India)
Mumbai
03.2014 - 04.2015
- Owned end-to-end service delivery for banking clients, ensuring adherence to SLAs without compromising quality.
- Delivered projects in line with client expectations and approved plans while guiding teams on regulatory and statutory compliance.
- Developed dashboards to highlight key risks for senior management and collaborated with backend teams on ad-hoc requirements.
- Led monthly and quarterly client review meetings, provided direction to project teams, managed escalations, and drove process improvements
Solution Architect
Paladion Networks (Qatar and India)
01.2013 - 03.2014
- Designed cost-effective solutions aligned with customer requirements and budgets, delivering POCs against agreed use cases.
- Addressed technical queries, conducted pre-sales presentations, and prepared RFP responses.
- Collaborated with client sponsors and coordinators during implementation to ensure smooth delivery.
- Implemented DLP, Vulnerability Management, Configuration Audit, and Data Classification solutions, while developing supporting operational processes and data registers.
Information Security Consultant
Paladion Networks (India and EMEA)
01.2008 - 12.2012
- Supported implementation and management of information security projects while sustaining operations with the IT security and risk management team.
- Reviewed compliance of applications and operations against policies, regulatory guidelines, and best industry practices, and implemented baseline security standards across systems and devices.
- Conducted risk assessments of new projects, applications, and third-party integrations, and assisted IT teams in executing recommendations from external security consultants.
- Supported incident response and forensic analysis for threats such as unauthorized access, malware, and data leakage, while enhancing and developing controls to address emerging risks and compliance requirements.
- Drove ISO 27001 compliance through continuous risk assessments, performance tracking of controls, compliance reviews, and maintaining ISMS documentation.
Education
Bachelor of Technology - Electronics And Communications Engineering
07.2000 - 06.2004
Duration: 2000 - 2004
Skills
Cybersecurity Operations Leadership
Incident Response and Crisis Management
Threat Intelligence & Threat-led Defense (MITRE ATT&CK & D3FEND)
AI/LLM Integration into Security Operations
Regulatory Compliance & Audit Engagement (eg, SOX, DORA, NIST, ISO 27001/2, SOC1/2, BMR)
Cost Optimization for Log Ingestion
Vulnerability Management & External Attack Surface Reduction
Certification
ISO 27001 Lead auditor certification
Timeline
Head of Security Operations - MSCI Inc.
11.2016 - Current
Delivery Manager- SOC - Paladion Networks (India)
05.2015 - 11.2016
Sr. Information Security Consultant - Paladion Networks (India)
03.2014 - 04.2015
Solution Architect - Paladion Networks (Qatar and India)
01.2013 - 03.2014
Information Security Consultant - Paladion Networks (India and EMEA)
01.2008 - 12.2012
Pondicherry University - Bachelor of Technology, Electronics And Communications Engineering
07.2000 - 06.2004
Accomplishments
- Oversaw a $1M annual reduction in SIEM operational costs.
- Managed the transition of cyber strategy from compliance-oriented controls to a threat-led (MITRE ATT&CK) strategy. The program scored in the 88% percentile in red/purple team simulated attacks when compared to 100+ other firms.
- Supervised vulnerability management improvements that reduced per-host vulnerabilities to fewer than ten, achieving aggressive remediation timelines.
- Led an operations review across regional sites, reducing security incidents by 40%.
Personal Information
- Passport Number: holding Passport
- Father's Name: Mr. Ravi Kumar Nigam
- Date of Birth: 01/27/82
- Nationality: Indian
Work Availability
monday
tuesday
wednesday
thursday
friday
saturday
sunday
morning
afternoon
evening
swipe to browse
Past Organizations
- Viniciti Networks Pvt Ltd-Security Engineer (E4E Group)- (Duration: Sep’05 till Jun’07)
- Slash Support India Pvt Ltd- Application Engineer (Duration: Jun’04 till Sep’05)
Websites
References
MSCI Inc
- John Rogers (CISO)
- Moses Adetiba Adediran (Ex- Dy CISO)
- Shamu Jain (SOC Manager)
Paladion Networks
- Jose Varghese (Co-Founder)
Global Experience Across
India
Malaysia
UAE
Qatar
Bahrain