E-MAIL: arun.bagwe@gmail.
com
Arun S. Bagwe MOBILE: +91-9819074096
IT Project Manager LOCATION
Mumbai
Seasoned IT Project Manager, bringing two decades of expertise in Information Security, Cybersecurity, GRC, and IT
Project Management | Driving Success in Banking, NBFC, and IT Consulting Services.
PROFILE SUMMARY
Pioneering Visionary: A trailblazing visionary leveraging technology to fortify critical assets and fuel strategic expansion.
Proficient in team leadership, driving excellence, and masterminding strategic IT ventures.
Accomplished IT Project Manager: With a remarkable history of orchestrating impactful projects across Information
Security, Cybersecurity, and GRC, while maintaining top-tier security and compliance standards.
Cybersecurity Vanguard: Spearheaded all-encompassing Information Security and Cybersecurity ventures, including
Application Security Management, Database Activity Monitoring, and Network Access Control, bolstering defenses against
ever-evolving cyber threats.
Security Configuration Maestro: Demonstrated mastery in executing Windows Server Hardening Reviews, deploying
resilient security configurations, and neutralizing vulnerabilities.
GRC Architect: Established and executed GRC frameworks, ensuring industry regulation compliance. Pioneered Application
Risk and User Access Assessments, rapidly identifying vulnerabilities and implementing mitigation strategies with expertise
in proactive risk management.
Strategic Roadmap Artisan: Crafted visionary strategic roadmaps for IT projects, embracing emerging technologies and
industry trends to catapult organizational competitiveness.
Collaborative Leadership Luminary: Led diverse, cross-functional IT teams, nurturing a culture of collaboration to realize
project objectives punctually and within budget. Formulated and executed strategic blueprints, harmonizing IT initiatives
with overarching organizational goals and objectives.
CORE COMPETENCIES
Information & Cyber Security Cyber Security Team Building & Leadership
Application Security Management Database activity Monitoring Network Access control
Windows Server Hardening Reviews Application Risk Assessment User Access Assessment
EDUCATION | CERTIFICATIONS SOFT SKILLS
MBA in Information Technology Management from Manipal Jaipur
University (Pursuing) Change Agent
Collaborator
Bachelor of Computer Application (BCA) from MAHGU
Communicator
Certified Ethical hacking (CEH) Innovator
Planner
Certified Information Security Manager (CISM)
Thinker
DIT from NIIT from MUMBAI Institute in 2003
CAREER TIMELINE
Aug’03 to Dec’07 – Feb’11 – Aug’13 –
Jun’19 Since Jun’19
Dec’07 Feb’11 Aug’13
NIIT Ltd ANB Consulting 3i-Infotech Cappian Hewlett Packard
Pvt Ltd Ltd Services Enterprises
WORK EXPERIENCE
Jun’19 - Current: Hewlett Packard Enterprises (Futurz staffing solution pvt. Ltd.), Mumbai as Project Manager
Client: AXIS Bank, Mumbai
Risk Assessment Management: Leading a proficient risk assessment team at HPE, dedicated to Axis Bank, conducting
comprehensive risk assessments of various security tools, including Firewall, Nevis NAC, Skybox, WIPS, DLP, Seclore, Uniken,
etc., and ensuring timely resolution of reported issues.
Security Solution Oversight: Ensuring closure of open observations and issues related to security solutions by collaborating
with relevant stakeholders.
Database Activity Monitoring (DAM): Managing the DAM team at HPE within Axis Bank. Monitoring database alerts and
escalating suspected incidents to the Ethics committee for further action.
User Access Assessment (UAA): Managing the User Access Assessment (UAA) team, including reviewing observation
reports, communicating findings to the IT team, and ensuring prompt resolution of reported observations.
WIPS Incident Monitoring: Monitoring Wireless Intrusion Prevention System (WIPS) incidents and ensuring the prompt
closure of suspected alerts.
Reporting and Analytics: Preparing and publishing multiple monthly, quarterly, and annual Turnaround Time (TAT)
reports for the team's performance.
Vendor Engagement: Collaborating with original equipment manufacturers (OEMs) to fine-tune and enhance security tools
such as DAM and WIPS, ensuring optimal tool performance.
Highlights:
Currently in the process of evaluating NAC (Network Access Control) Proof of Concept (POC) and have successfully assessed
CISCO ISE and Aruba Clear Pass tools.
Overseeing Data Flow Analysis to refine DLP policies and enhance the Data classification tool.
Compiling and disseminating regular TAT (Turnaround Time) reports, providing crucial visibility to higher management.
Proactively monitoring database alerts and escalating 4-5 true positive suspected reports to the Ethics committee for action.
Effectively coordinating with the IT team to promptly close observations reported by the UAA team, achieving a significant
reduction from 68% to 20% within one year.
Fronting HPE's rigorous risk assessment team at Axis Bank, overseeing application risk reports and driving resolution of the
RA team's observations, achieving an impressive reduction from 68% to 20% in just one year.
Led the DAM team at HPE in Axis Bank, collaborating with OEMs to enhance security tools, fine-tuning policies, and reducing
false-positive alerts from 40,000 to 15,000.
Aug’13 – Jun’19: Cappian Services, Mumbai as Information Security Analyst / Business Partner
Client: Reliance Jio, Pune
Data Center Server Installation: Installed and configured data center servers for secure and seamless operation.
Security Auditing: Conducted rigorous security audits of servers in strict adherence to established security policies,
guaranteeing compliance, and identifying vulnerabilities.
Data Center Audit: Performed comprehensive data center audits to evaluate security measures, access controls, and
physical security safeguards.
Exception Handling: Expertly managed and addressed security exceptions, ensuring timely and effective resolution to
maintain the integrity of the security infrastructure.
Highlights:
Effectively oversaw data center rack and server installations, ensuring timely Reliance Jio 4G implementation.
Conducted security audits, including Windows server hardening reviews for nearly 400 servers.
Efficiently conducted data center audits while ensuring the timely completion of the Reliance Jio 4G implementation.
Feb’11 – Aug’13: 3i-Infotech Ltd, Mumbai as Information Risk Manager
Client: ICICI Bank Ltd, Mumbai
Application Risk Assessment Management: Efficiently led the ICICI Bank application risk assessment team, overseeing
the review of risk reports and ensuring timely resolution of the RA team's observations.
Application Risk Report Oversight: Ensured the timely closure of application risk reports from various stakeholders,
including obtaining Information Security head sign-off.
Network Access Control (Nevis) Management: Managed Nevis Network Access Control (NAC) team, ensuring hardening
parameter compliance via NAC tool monitoring, and executed NAC migration effectively.
Web Application Security Tools Evaluation: Evaluated and implemented web app security tools for enhanced security.
Highlights:
Efficiently managed ICICI Bank's application security lifecycle, addressing Risk Assessment team's observations for 350
business applications.
Achieved 98% ASLC (Application Security Life Cycle) compliance, ensuring timely closure of risk reports from stakeholders,
including Information Security head sign-off.
Effectively managing the Nevis Network Access Control (NAC) team, monitoring endpoint and server hardening parameters
using the Nevis NAC tool and ensuring a 95% compliant security posture.
Successfully migrated the NAC tool from the old enforcer to the new one.
PREVIOUS EXPERIENCE
Dec’07 – Feb’11: ANB Consulting Pvt Ltd, Mumbai as Information Security Analyst
Client: ICICI Bank Ltd, Mumbai | Citi Bank, Mumbai
Aug’03 to Dec’07: NIIT Ltd, Mumbai as Front-office coordinator
PERSONAL DETAILS
Date of Birth: 13th October 1983
Languages Known: Hindi, English & Marathi
Preferred Location: Mumbai
LinkedIn: https://www.linkedin.com/in/arun-bagwe-b00a48123
