Summary
Work History
Education
Skills
Previous Roles
Professional Development
Timeline
Shrinivasan Mani

Shrinivasan Mani

Summary

Result-driven Cybersecurity Executive with 25+ years of experience leading enterprise-wide security transformations, aligning cybersecurity with business strategy, and delivering resilient security solutions for Fortune 500 companies. With 10+ years of experience in managing large programs on Incident Response, threat detection and Security Operations Center, I have advised executives, compliance teams and legal on the impact of security incidents, their containment and remediations. Trusted advisor to CISOs and executive leadership, specializing in cyber resilience, regulatory compliance, threat management, Managed Detect and Respond (MDR)/Security Operations Center (SOC) services, Identity as a Service (IDaaS), and Vulnerability Management as a Service (VMS). Proven track record in building and scaling high-performing security practices, driving go-to-market (GTM) strategies, and fostering world-class security teams. Extensive experience with managing Master Service Agreements (MSA), Statement of Work (SoW), Inter Office Amendments and other contractual documents. Excels in strategic planning, team leadership, and detailed execution, ready to bring a wealth of experience and a fresh perspective to my clients.

Work History

Senior Director, Managed Security Services

Protiviti
Dallas, TX
01.2022 - Current
  • Architected, designed, built, sold and running a Managed Security Services portfolio, comprising Managed Detect and Respond (MDR)/Security Operations Center (SOC) services, Identity as a Service (IDaaS), and Vulnerability Management as a Service (VMS)
  • Managed Detect and Respond platform is built on the Microsoft Sentinel platform, and provides threat monitoring, threat hunting, and threat remediation services in our Security Operations Center (SOC)
  • Vulnerability Management as a Service, scans, detects, prioritizes and remediates vulnerabilities across the enterprise
  • Identities as a Service (IDaaS) provide clients with a modern identity solution built on SailPoint IGA, Okta SSO, and CyberArk PAM to manage user identities and entitlements for our clients
  • Managing the Managed Security Services teams to provide support services, metrics reporting and driving program maturity for our clients
  • Work with Protiviti and client Legal teams to create Master Service Agreements (MSA) for all clients, Statement of Work (SoW), validating redlined client responses and finalizing contractual documents with all stakeholders
  • Built and managed a global 24x7 team across the US, and India, leading a team of 50+ security professionals, generating $25-30M in annual sales and $20M in annual revenue

Senior Director, Cyber Security

Infosys Limited
Dallas, TX
07.2015 - 01.2022
  • Led the architecture and deployment of the Infosys Cyber Next platform which is a ready to use platform comprising Cyber Watch, Cyber Intel, Cyber Hunt and Cyber Scan platforms
  • Cyber Watch platform is built on the QRadar platform, and provides threat monitoring, co-relation, alerting and remediation of threats in a Cyber Defense Center (SOC)
  • Cyber Intel service provides a curated threat intel feed which is integrated into Cyber Watch (or any SOC/MDR) and Firewall (or IDS/Ips) platforms, to provide extensive threat data which is leveraged for real-time threat monitoring, analysis, and co-relation for alerting, blocking and remediation functions
  • Cyber Hunt service proactively detect anomalies associated with threats using analytics and visualization built on a “data lake” of threats
  • Cyber Scan services provide a unified vulnerability management service providing real-time vulnerability detection, prioritization and remediation of threats, it also provides preventive security measure that offers in-depth remediation advisory service based on real-time threat intelligence, asset criticality and asset placement to immediately patch crucial vulnerabilities
  • Managed a client portfolio generating $50-60M in annual sales and $10M in quarterly revenue by providing advanced Cyber Security capabilities to multiple customers across North America
  • Established a North America CISO Advisory Council of 30+ CISOs, providing strategic guidance and generating key business development opportunities, enhancing client engagement
  • Consistently achieved operational KPIs, managed P&L, and drove client satisfaction through effective team leadership and client engagement, resulting in a 30% improvement in client satisfaction rates
  • Led incident response during critical security incidents (Ex: Wannacry) in containment, remediation and reporting, briefing executive leadership and other client stakeholders about the incident, our team’s response in handling it and improved stakeholder confidence
  • Lead and direct multiple Technical Service Delivery team(s)

Lead Architect, Oracle Consulting Services

Oracle Inc
Dallas, TX
04.2012 - 07.2015
  • Advised on the security architecture and implementation of the Affordable Healthcare Act platform, ensuring HIPAA compliance and a seamless user experience for millions, secured with Oracle Access Management
  • Consulted with Fortune 500 enterprises to develop and implement Enterprise Architecture Standards and Security Reference Architectures, aligning with business objectives and risk tolerance
  • Architected, designed, built and implemented Identity Governance (OIG), Access Management (OAM), Adaptive Access Management (OAAM) and Privileged Account Management (OPAM) for multiple enterprise clients across North America
  • Tuned and optimized Identity and Access Management platforms for my clients

Information Security Manager

Emerson Electric Co
St. Louis, MO
07.2009 - 04.2012
  • Created a multi-year Cyber Security strategy, resulting in a 15% reduction in risk exposure and a 10% improvement in security posture by rolling out Identity and Access Management, Endpoint Security, and other key security controls
  • Implement a multi-year vision for a target state Enterprise Security Architecture that includes advanced security technologies, practices, and processes, advised the CISO on multiple emerging technologies of the day after evaluating them, comparing multiple platforms and ranking them
  • Setup a Security Operations Center (SOC) with a Managed Security Services Provider (MSSP), managed SOC setup and operations improving incident response times by 20%
  • Evaluated multiple platforms for Data Loss Prevention (DLP), Web Security, Application Security and selected best in class platforms, managed their deployment and transitioned to operations team for BAU support
  • Developed a multiyear Identity and Access Management Roadmap for rolling out Identity and Access Management across Emerson to provide Authentication, Authorization, Access Control and Auditing for Emerson’s strategic applications
  • Developed a framework for security solutions evaluation, vendor selection, and Total Cost of Ownership (TCO) calculation, contributing to the CISO’s core team for Security strategy and Governance
  • Was an authoritative voice and articulate convincingly the security risks and rationale for prioritized solutions in a risk-based approach that outlines risk tradeoffs and tolerance
  • Instilled a culture of security awareness and evangelize security best practices and principles with application development teams

Technical Manager

PricewaterhouseCoopers LLP
St. Louis, MO
11.2008 - 07.2009
  • Focused on Identity & Access Management, Data Protection, and Threat & Vulnerability Assessments
  • Devised a HIPAA security framework for the Healthcare Industry
  • Performed security assessments and product evaluations for multiple customers

Education

Master of Computer Application -

St. Joseph’s College

Bachelor of Mathematics -

St. Joseph’s College

Skills

  • Cyber Security Strategy & Architecture
  • Cyber Resilience
  • Zero Trust Architecture
  • Risk Management & Compliance
  • SSOC/MDR
  • Identity & Access Management
  • Vulnerability Management
  • Application Security & DevSecOps
  • Data Protection & DLP
  • Endpoint Detection and Response
  • GRC Tools
  • Security Consulting & Sales
  • Program & Client Management
  • Team Leadership & Mentoring
  • Practice Development & Management
  • Go-to-Market Strategies

Previous Roles

  • Emerson Electric, St. Louis, Program Manager
  • MasterCard Worldwide, Program Manager SecureCode Payment Security Program
  • EBay Inc, Program Manager eBay Marketplace
  • Wipro Technologies, India, Delivery Manager for Application Security Practice

Professional Development

  • Cyber Security Master Training, Purdue University
  • Stanford Computer Forum, Stanford University
  • Oracle Identity Management Training, Oracle University

Timeline

Senior Director, Managed Security Services - Protiviti
01.2022 - Current
Senior Director, Cyber Security - Infosys Limited
07.2015 - 01.2022
Lead Architect, Oracle Consulting Services - Oracle Inc
04.2012 - 07.2015
Information Security Manager - Emerson Electric Co
07.2009 - 04.2012
Technical Manager - PricewaterhouseCoopers LLP
11.2008 - 07.2009
St. Joseph’s College - Master of Computer Application,
St. Joseph’s College - Bachelor of Mathematics,
Shrinivasan Mani