Mohsin Khan

Strategic Role Overview and Business Alignment. Part of leadership team, Responsible for the Information & Cyber Security posture, ensuring that digital assets, data, and infrastructure are protected against cyber threats. Role extends far beyond technology — it involves governance, risk management, compliance, and board-level communication. Core Responsibilities A. Strategic Leadership • Define and execute the enterprise cybersecurity strategy aligned with business objectives. • Report regularly to the Board of Directors / Risk Committee on cyber risk posture and maturity. • Drive a “security-by-design” culture across IT, operations, and product lines. B. Risk Management & Governance • Lead enterprise-wide risk assessments and maintain a Cyber Risk Register. • Establish information security governance frameworks (ISO 27001, NIST CSF, CIS Controls, etc.). • Integrate cybersecurity into the Enterprise Risk Management (ERM) function. C. Threat & Incident Management • Oversee Security Operations Center (SOC), threat intelligence, and incident response. • Lead crisis management and cyber breach response, including coordination with legal, PR, and regulators. • Ensure business continuity, disaster recovery readiness, resilience and forensic capabilities are tested. D. Compliance & Regulatory Alignment • Ensure compliance with global regulatory frameworks , e.g.: • IRDA, NIST, ISO 27001, Cert-In, GDPR, DPDP, CSCRF etc • Partner with Legal, Risk, and Compliance teams on audits and external assessments. E. Technology & Architecture • Oversee secure architecture design across cloud, data centers, and applications. • Drive initiatives like Zero Trust, Identity & Access Management (IAM), Data Loss Prevention (DLP), and Encryption. • Ensure third-party risk management and vendor security assurance. F. Awareness & Culture • Build a cyber-aware workforce through training and simulations. • Champion security culture transformation across all levels.

Founder Member- Designed and implemented IT Services and Cyber Security Framework and strategy for IT Infrastructure & Cyber Security Practice. Managed the availability, integrity, and security IT systems and infrastructure, as well as implementation and operations, which includes IT workplace or End User Computing services, enterprise network services including unified communications as well as datacenter services management and public cloud workloads.

Accomplishments Led complex Technology Infrastructure comprising of Data center Operations, Public & Private Cloud Hosting Services, IAAS, PAAS, Application Security, End user computing & Mobility services, Connectivity services, Business continuity and DR services. Administered end-to-end activities consisting of Deploy, Administer & Manage Infrastructure, Network, Security, Contact Center, Win/Linux Servers, Databases, EUC Solutions & related infrastructure in multiple region in a “predict and prevent” model together with strategic vendors and enabling business and end user services.

Founder Member- Had responsibility to manage the availability and responsiveness of the enterprise infrastructure that meets the goals and requirements of the organization. Managed benchmarking, analyzing and recommendations for performance improvements. Managed IT and Security Services operations and performance of System Network, Data Center Infrastructure, Remote Access Services, Wireless Networks, Enterprise Messaging and Unified Collaboration systems, IAM, WAN / LAN, Voice Technologies / Contact Centers, and Cloud. Implemented global standards and processes that were applicable to People, Technologies and extended vendor support teams.

Establish and oversee IT Operations function ensuring that all goals and SLAs are met or exceeded and effectively communicate the business impact across the organization. Lead and/or actively contribute to continuous improvement initiatives with the primary aim of reducing onshore execution man-hours. Build and maintain excellent working relationships with the IT Leaders, Collaborate with Leadership to achieve goals and objectives of the department. Attend infrastructure/cloud, application and security leaders staff meetings once a month to provide feedback on offshore resources, initiatives, etc. Act as the IT/Company Focal-Point for all offshore activity, including management of the Offshore Delivery Team, Manage offshore contractors as needed and help hire the talent with the proper skills Lead budgeting and monthly review of offshore resources with IT Controller, etc. Obtain and validate resources, task durations, timelines, deliverables and milestones. Identify risks and issues. Evaluate courses of action and contingency plans, including mitigation or escalation. Assist in building relationships with vendors and managing deliverables-based contracts.

Responsible to lead the IT Operations services for Nationalised Bank.