Mithun SanghaviMITHUN SANGHAVI

Career

Experience

A career spanning BFSI, NBFC, Oil & Gas, Healthcare, Technology, Telecommunications, E-commerce, Education, and Aviation, from L3 endpoint security support to leading cybersecurity delivery portfolios exceeding USD 200 million cumulatively and multidisciplinary teams of 300+ professionals.

  1. Nov 2024 – Jul 2026

    Director Cyber Security

    LTM · Mumbai

    • Owned P&L and budgets for a USD 35M Global Cybersecurity Delivery Practice & GCC, driving profitable growth, commercial performance, pricing, service development, and commercialization across multi-client, multi-geography portfolios.
    • Built and led an 80+ member global cybersecurity team comprising Security Architects, SOC Engineers, and Analysts, sustaining 80% client retention through high-performance delivery, capability development, and client-centric execution.
    • Acted as vCISO for global BFSI and manufacturing enterprises, advising CXOs and Boards on cybersecurity strategy, cyber-risk, governance, resilience, security transformation, and investment priorities.
    • Led integrated Cyber Defence Platforms spanning AI Security, OT/IoT, Cloud Security (Azure/AWS), IAM, EDR/XDR, SOC, SIEM, Threat Intelligence, Threat Hunting, Digital Forensics, and Incident Response.
    • Directed cybersecurity governance and compliance programs aligned with RBI Master Directions, ISO 27001, DPDP Act 2023, NIST, NIS 2.0, ITAR, and GDPR, reducing enterprise risk exposure by 20% and strengthening regulatory readiness.
    • Led internal and external IT audits covering ISO 27001, ITGC, and SOC 2, establishing continuous assurance and sustained audit readiness across the global client portfolio.
    • Drove Go-to-Market strategies for Cyber GCC consulting portfolios, increasing market presence and client engagement by 20% in first quarter, commercializing vCISO-as-a-Service and SOC-as-a-Service offerings.
    • Formulated enterprise-wide Data Privacy strategies aligned with DPDPA, GDPR, and CCPA, driving privacy awareness, regulatory compliance, strategic partnerships to expand global cybersecurity delivery capacity.
    • Led CISO/vCISO strategy and enterprise cyber transformation across GRC, AI, Cloud, IT/OT/IoT, and resilience, improving cyber maturity by 20% across multiple business units.
    • Strengthened Cyber Risk, GRC, privacy, and regulatory compliance, reducing critical/high-risk exposures by 20% and elevating compliance maturity.
    • Transformed SOC, Cyber Defence, Threat Intelligence, and AI Security, improving threat-detection coverage and reducing MTTD/MTTR by 25%.
    • Governed board-level cyber risk, business continuity, and operational resilience, enhancing executive risk visibility by 20% and protecting critical processes.
  2. Aug 2022 – Jul 2024

    Associate Director – Cyber Security & IT Risk

    Grant Thornton Bharat LLP · Mumbai

    • Global Delivery Head of Cybersecurity & IT Risk and vCISO for Global MNCs. Led global Cybersecurity & IT Risk delivery in GCC reporting to the Partner and driving expansion and scalability of the Cyber Global Delivery Practice.
    • Delivered vCISO-as-a-Service, establishing governance mechanisms to monitor, assess, and mitigate enterprise-wide cyber risks for global clients.
    • Led Cyber Defence Platforms across AI Security, OT, Cloud, IAM, EDR/XDR, SOC, SIEM, Threat Defence, Threat Intelligence, Threat Hunting, Digital Forensics, and Incident Response.
    • Guided Government, BFSI, NBFC, and Manufacturing clients on RBI, ISO 27001, DPDP Act 2023, NIST, NIS 2.0, ITAR, GDPR compliance, while establishing crisis, disaster management and cyber-resiliency programs.
    • Trained IT Audit teams across ITGC, SOX, SOC 2, and TPRM, strengthening audit delivery, control assurance, and risk governance capabilities.
    • Optimized strategic outsourcing models to enhance scale, growth, and profitability, while briefing Boards on security posture, control effectiveness, emerging threats, and threat-intelligence insights.
  3. Apr 2018 – Aug 2022

    Cyber Risk and Security Delivery Manager

    Wipro Limited · Pune / Mumbai

    • Reported to the Global CISO, Aviva UK, serving as Asia Virtual CISO and IT & Infrastructure Lead for the Insurance Divestment Project, coordinating cybersecurity across Asian markets.
    • Oversaw IT/OT security for the Offshore Development Center and CoE / GCC supporting Toronto Pearson Airport, covering Endpoint, Network Security, IAM/PAM, Incident Response, and Cyber Intelligence.
    • Led End User Computing, Cybersecurity, Endpoint Security, and Compliance for HDFC Bank’s pan-India banking program, one of India’s largest private-sector banking engagements.
    • Conducted global IT audits across ITGC, ISO 27001, PCI DSS, SOC 1/2, GDPR, NIST RMF, ICAO, and ISA/IEC 62443, strengthening control assurance and regulatory compliance.
    • Built a Cybersecurity Practice delivery portfolio, developing differentiated value propositions across the client value chain while managing delivery variances through risk and change management.
    • Partnered with Client Engagement/Delivery Managers and CXOs to drive new opportunities and account expansion, while strengthening team engagement, delivery performance, and retention.
  4. Aug 2017 – Apr 2018

    Cyber Security Manager

    Capgemini · Mumbai

    • Managed end-to-end Cybersecurity & Compliance Operations for TOTAL, covering security audits, incident management, and lifecycle security across the enterprise environment.
    • Implemented ITIL-aligned SOC best practices and led the Cyber Incident Response Team, establishing and operationalizing the enterprise-wide incident response framework.
  5. Mar 2015 – Jul 2017

    Associate Security Architect

    Tech Mahindra · Pune

    • Designed and implemented security architectures for Vodafone India and Endpoint Security solutions for ANZ Bank, Australia, strengthening enterprise security posture.
    • Translated multi-vendor client requirements into robust security control designs, identifying and closing critical infrastructure security gaps.
  6. Jan 2014 – Mar 2015

    Senior Consultant

    Atos India · India

    • Served as Subject Matter Expert for Symantec Endpoint Protection and led a 40,000-endpoint migration for S&P Global and McGraw-Hill Education from SEP 11.x to 12.1, ensuring secure and seamless transition.
    • Delivered L3 support, malware and security-log analysis, while conducting internal Information Security risk assessments and audits to strengthen threat detection, control effectiveness, and security assurance.

Earlier Roles

  • Enterprise Product Support Engineer · SymantecSep 2007 – Dec 2013
  • Sr. Technical Help Desk Associate · Wipro BPOJun 2006 – Sep 2007
  • Technical Help Desk Associate · Sutherland Global ServicesMar 2005 – Dec 2005
  • Operations / Administration Roles · Various OrganizationsMay 1997 – Mar 2005

Professional Certifications & Credentials

Cybersecurity Leadership, Audit & Governance

  • Certified Chief Information Security Officer (CCISO)
  • Certified Information Systems Auditor (CISA)
  • Certified Information Security Manager (CISM)
  • Certified Ethical Hacker (CEH)

Cloud & Emerging Technology Security

  • AWS Security
  • Microsoft Azure Security
  • Google Cloud Security
  • AI Security

Risk, Compliance & Security Frameworks

  • NIST Cybersecurity Framework (NIST CSF)
  • HIPAA

Security Technologies & Operational Excellence

  • Qualys VMDR
  • Symantec Security
  • Microsoft Certified Systems Administrator (MCSA)
  • Microsoft Certified Professional (MCP)
  • Scrum Master
View all licenses & certifications →