Nachiket Sathaye

Critical-Infrastructure Utility, Dubai

Lead enterprise security initiatives across traditional infrastructure, cloud, digital platforms and AI systems.

Security Architecture and Engineering

• Security architecture reviews, threat modelling, risk assessments and compliance gap analyses against ISO 27001, NIST, CIS Controls, DESC ISR and internal standards
• Lead the Zero Trust Architecture and micro-segmentation programmes
• Deliver web application security and WAF, identity and access management, endpoint privilege management, file integrity monitoring and secure access
• Design and implement security controls across enterprise platforms, and support compliance teams in maintaining regulatory framework controls

Infrastructure Security Projects

• Planned, designed and implemented remote access strategies
• Designed and implemented network packet broker and WAF integrations for a critical landscape
• Implemented mobile device management (MDM) for the enterprise mobile ecosystem
• Implemented file integrity monitoring for critical assets with service owners, the SOC and FIM administrators
• Core team member designing NAC, micro-segmentation and Zero Trust strategies

AI Security Architecture

• Lead AI security across GenAI, RAG, AI agents and enterprise AI applications, from design through deployment, monitoring and governance
• Evaluate and integrate AI security technology for prompt security, AI DLP, model monitoring, agent security and AI threat detection

AI Governance and Risk

• Drive AI governance and risk programmes aligned to NIST AI RMF, ISO/IEC 42001, the EU AI Act and Responsible AI principles
• Extend existing GRC processes to AI-specific risk, moving from Responsible AI towards Accountable AI: auditability, decision traceability, AI observability and human oversight

Global Technology Consulting Group, India and Europe

• Created a managed detection and response (MDR) framework and built an MSSP capability from the ground up, including SOC workflows, service catalogues, threat intelligence and incident response
• Designed and launched MDR and EDR managed service offerings for global customers, aligning SOC workflows with client SLAs
• Drove security strategy with executive leadership across Nordic and APAC regions, managing cross-functional, multicultural delivery teams
• Supported the build of a Cyber Defense Center: governance, tool integration and operational planning
• Defined cybersecurity roadmaps and enterprise security architecture with C-level stakeholders in BFSI and critical infrastructure
• Advised on GDPR, ISO 27001 and PCI-DSS compliance and oversaw large security rollouts from budget to post-implementation audit

Enterprises, System Integrators and Cloud-Native Companies, India, Middle East and Southeast Asia

• Helped a payment gateway in Thailand restructure its cloud security controls to achieve PCI-DSS recertification on AWS
• Led design and deployment of an EDR solution for large enterprises and payment providers
• Contributed to a critical-infrastructure audit for a UAE government entity
• Delivered VAPT across internal and external networks, cloud systems and web applications, plus code reviews and architecture reviews across network, web, mobile and data centre environments
• Consulted enterprise clients across BFSI, telecom and fintech on security architecture, compliance and SOC implementation; ran GRC reviews and audit readiness against PCI-DSS, ISO 27001, SOX and RBI/SEBI guidelines
• Designed and implemented firewalls, WAFs, endpoint security, SIEM and APT defences, and ran technical training for IT and security teams

Global Payments Company, Mumbai

Regional security lead for India, China, the Middle East and Southeast Asia in a payments environment.

• Defined and ran the information security strategy and governance model across multiple countries, aligned to global standards
• Set security architecture standards for critical systems and payment infrastructure
• Led incident response planning, vulnerability management and malware reverse engineering with SOC teams
• Ran periodic risk assessments and business impact analyses for critical applications, and coordinated third-party vulnerability testing
• Built disaster recovery and continuity (COOP) strategies and tested DR readiness across countries
• Supported certification and audits against PCI-DSS, SOX, RBI, MAS-TRM and ITIL; presented risk and roadmaps to senior management and global stakeholders

Earlier Roles

• Network Administrator, IT Services Partner, Mumbai (Dec 2007 – Feb 2009)
• Network Analyst, Global Technology Company, Mumbai (Jul 2006 – Dec 2007)
• Junior System Engineer, Network Solutions Firm, Thane (Oct 2005 – Jun 2006)