charles' CV
charles vijayanand
Associate Vice President | Information Security
Profile summary
Strategic Information Security Executive with 17 years shaping cybersecurity governance, risk management, and regulatory compliance. Known for defining enterprise-wide frameworks that accelerate issue remediation, reduce vulnerabilities, and achieve zero major audit nonconformities across global financial institutions. Committed to aligning technical controls with operational objectives while leading cross-functional teams across multiple regions.
Career highlights
Cybersecurity Governance and Compliance: Shaped global cybersecurity governance and established a unified GRC framework that accelerated issue remediation by 25% while managing cross-functional teams.
Security Operations and PAM: Directed security operations for a 12-member team and designed the Privileged Access model in CyberArk to enable automated recertifications and role-based access control.
Vulnerability Management and Audits: Implemented server hardening across enterprise Windows environments, ensuring 100% benchmark compliance and a 35% reduction in vulnerabilities during audits.
Professional Certifications: Earned the Certified Information Security Manager credential alongside ISO 27001 Lead Implementer and ITIL v3 Foundation certifications to support compliance programs.
Key skills
Professional experience
Reports to the Managing Director, guiding cross-functional teams of 10+ specialists across global infrastructure domains. Defines enterprise-wide regulatory compliance strategies and steers global cybersecurity governance frameworks.
- Established a unified GRC framework integrating risk registers, audit findings, and control testing, accelerating issue remediation by 25%.
- Redesigned security control validation workflows and automated evidence collection, reducing operational downtime by 30%.
- Directed ISO 27001 recertification and internal audit readiness, achieving zero major nonconformities and elevating audit maturity by 25%.
- Implemented server hardening across enterprise Windows environments, ensuring 100% benchmark compliance and a 35% reduction in vulnerabilities.
- Represented the Information Security function in executive reviews and regulatory audits including RBI and MAS.
Steered security operations for a 12-member team managing Windows, Linux, and database infrastructure, overseeing privileged access governance, regional deployment schedules, and audit readiness across financial systems.
- Designed and managed the Privileged Access model in CA Privileged Access Manager and CyberArk, enabling role-based access control, automated recertifications, and policy enforcement across enterprise systems.
- Established processes to detect and block malicious websites, monitor security posture, and deliver actionable insights to management, improving overall risk visibility and response efficiency.
- Streamlined evidence collection and control reporting for regulatory and internal audits, enhancing compliance with ISO 27001, PCI-DSS, and regional banking regulations while ensuring zero major nonconformities.
Shaped privileged access management operations, directing technical support functions and aligning security controls with compliance requirements. Defined process standardization workflows across internal teams to maintain continuous protection of sensitive assets.
- Managed maintenance and support of security technologies, ensuring continuous protection of sensitive assets.
- Developed implementation guides and documentation to standardize processes across teams.
- Collaborated with IT and compliance teams to enforce controls and meet regulatory requirements.
Guided an 18-member application security team and managed the migration of banking systems between international regions, directing privileged access governance and operational compliance frameworks across enterprise portfolios.
- Maintained 95% adherence to service level agreements for operational compliance while administering CyberArk components including Vault and PVWA.
- Trained business users on request management processes during the transition of banking applications from Africa to India.
- Coordinated application owner engagement to onboard accounts, enforce access policies, and review security playbooks.
Education
Information Technology