Parthasarathy
Bharathy

Senior Manager — Information Security (Head of GRC)

Uniphore Software Systems Pvt. Ltd., Chennai, India

• Architect and lead enterprise-wide Security, Risk and Privacy programs across NIST 2.0, ISO 27001/27701/27017/27018, SOC 2 Type II, PCI DSS 4.0, CPRA/CCPA, HIPAA and GDPR.
• Own the Cybersecurity Governance Program, aligning security, risk and privacy controls across cross-functional teams.
• Lead Privacy Impact Assessments for all SaaS products on AWS and GCP; respond to due-diligence inquiries via CSA CAIQ, Cyber GRC, Drata, Metric Stream, RSA Archer and OneTrust GRC.
• Maintain a customer-facing Trust Center and executed the annual TPRM assessment across the top 50 critical vendors within 30 days.
• Led ISMS gap assessments and certification audits to completion within 4 months with zero major non-conformities; delivered GDPR, HIPAA and PCI DSS certifications on the same timeline.

Director — IT Risk & Governance Management

Ernst & Young LLP, Chennai, India

• Directed IT risk, network, endpoint, logical, operational and data security controls across all client locations, aligned to contractual and regulatory requirements.
• Led cross-functional teams enforcing compliance across vulnerability remediation, patch management, and audit requirements — NESA, ADHICS, SOC, ISO, PCI, VAPT, OWASP, WAF and firewall governance.
• Directed cross-functional audit, remediation, incident response and business continuity initiatives strengthening client-side security resilience.

Senior Manager — Data Security IRM Lead, APAC & MEA

Larsen & Toubro Infotech (LTI), Chennai, India

• Led implementation, monitoring and validation of information, network and data security controls across APAC and MEA client locations.
• Directed security audits and certifications including ISO, NESA, ADHICS, PCI and SOC, consistently meeting client compliance expectations.
• Owned end-to-end incident and threat management — identification, assessment, mitigation and continuous monitoring.

Manager — Corporate Security (Information Risk Management), Insurance BU

Cognizant Technology Services, Chennai, India

• Led security risk assessments (ISO, PCI SAQ, internal) across all India locations, owning the full risk and control lifecycle.
• Directed vulnerability remediation, ITGC testing and mitigation, enforcing corporate security controls across change management and logical access.

Senior Security Engineer (Lead) — SOC (M&A)

Merrill Corporation, Chennai, India

• Led the SOC team managing network security operations — IDS/IPS, WAF, firewalls, switches and routers.
• Developed correlation rules and alerts to enhance threat detection based on risk assessments.