Rajesh Bhavsar

• Over 25 years of experience and technically sophisticated professional with continued career progression.
• Experience in IT Infrastructure Management, Information Security Management, Cyber Security, VAPT, Security Intelligence, Risk Management, Change Management, Incident Management, Analysis & Reporting, Network/System/Security Administration and Security Audit.
• Achieved globally recognized professional certifications like CISSP, CISM, CEH, CCSK, ISO 27001 LA and ITIL.
• Sound knowledge and experience on Security Frameworks, Standards & Compliances; Framing and Implementation of Policies & Procedures based on ISO 27001, ISO 20000, NIST CSF and PCI-DSS.
• Work closely with Senior Management, Business Units/Processes and Business Partners to address Information Security requirements and ensure compliance.

Orange Business Services (OBS)                                                                                      

Security Lead                                                                                                  January 2018 – September 2023

Subject Matter Expert                                                                                      August 2016 – November 2017

Worked at Government of Gujarat State Data Center (GSDC) as Security Lead and handled following activities: 

• Successfully handled Security Operations at GSDC without any security breach/SLA breach penalties.
• Assess, identify and mitigate risks and vulnerabilities in network, systems and application components at Gujarat State Data Center (GSDC).
• Day to day analysis and management of security devices/solutions like Firewall, IDS/IPS, Endpoint Security, WAF, SIEM, and Email Security Gateway to protect the network from malware, website attacks, DDoS attacks, spamming & phishing.
• Participate in weekly CAB meetings to discuss security related changes required based on analysis, incidents or major version upgrades.
• Perform root cause analysis and incident handling during network problem or security attack/breach. 
• Continuous co-ordination with ISO Manager for compliance of ISO 20000 and ISO 27001 standards.
• Leading a team of security engineers to manage security at GSDC.

Contis Technologies Private Ltd., Ahmadabad                                                            May 2013 – July 2016

Security Architect

A subsidiary of UK based finance company Contis Group Limited (a Principal Member of Visa Europe) providing technology solutions for Prepaid Card, Gift Card and Processing. Acquired by Solaris Group of Germany.

• Successfully handled end-to-end PCI DSS Compliance project at India and UK offices and achieved Level1 PCI-DSS Certificate for the Company.
• Frequently visited to Contis’ Skipton, UK offices for doing PCI-DSS implementation, GAP analysis, Pre-assessment and Final-assessment.
• Designed, developed and implemented Policies, Procedures and Best Security Practices as per PCI-DSS Standard requirements.
• Implemented SIEM/Log Management solution, Two-Factor Authentication and End-Point Security at various Contis’ Office locations.
• Coordinated with QSA (ECSC Ltd., UK) and provided all documentation and implementation details during PCI-DSS assessment.
• Played a key role in migration of hosted systems and applications from old private cloud environment to new private cloud environment at Cloud Service Provide site.
• Provided Security Awareness training to ensure that all software developers are aware of OWASP Top 10 and Secure Coding Practices.

(n)Code Solutions – An IT Division of GNFC Ltd., Ahmedabad                                   Jun 2011 – Jan 2013

Manager – Systems & Network (Data Center)

• Manage network, systems and security for Data Center operations: Security and availability of Data Center Services; proper utilization of IT Infrastructure resources; ensure proper hardening of servers, network & security devices and applications; provide scanning reports to internal audit team; ensure proper change management and compliance to ISO 27001, ISO 20000 and ISO 9001 standards; ensure backup of all critical data.
• Successfully managed migration of Servers, ISP, Cabling, Network and Security devices in Data Center with minimum disruptions. 
• Involved with other team members in evaluating and identifying IT Infrastructure requirements for internal as well as external (based on RFP) and proposed solutions.
• Involved with other team members to evaluate different Cloud Infrastructure Solutions available from VMware, Microsoft and Citrix.
• Suggested and implemented BGP multi-homing between two ISPs for high availability and load balancing.

Wipro Limited, Ahmedabad                                                                                               Nov 2004 – Feb 2011

Technical Specialist – Security Management

Worked at Government of Gujarat State Data Center (GSDC) as Technical Specialist - Security Management and handled following activities: 

• Designed and implemented security architecture at SDC as per the SLA requirements, which include Firewall management, IDS/IPS management, Patch management, Antivirus management and content filtering for SPAM and Intranet/Internet traffic. 
• Designed and successfully implemented defense in depth security strategies at perimeter, network, applications and server level by applying security best practices at all layers.
• Preformed information security risk analysis and reporting; worked jointly with third party auditor (TPA) and customer to aggregate risks and risk mitigation planning.
• Involved with Third Party Auditors (TPA) and government representatives for identifying h/w and s/w requirements for network, security, applications for enhancement of the GSDC network for better security and performance and provided specifications and inputs to prepare RFP for State Data Center (SDC) and Mini Data Centers (MDC). 
• Monitored and analyzed logs of firewall, IPS, content filtering, routers & switches and taken proactive/preventative steps to secure Gujarat State Wide Area Network (GSWAN) network.

Indusa Infotech Services, Ahmedabad                                                                             Sep 2000 – Jul 2004

Systems & Network Manager

The state-of-the-art ISO 9001:2000 certified offshore software development center of the US based Company Indusa Technical Corp. Acquired by Synoptek, USA.

• Planning and budgeting for the enhancement of the organization’s IT Infrastructure in synergy with its growth objectives.
• Provided quality support & maintenance services to ensure maximum uptime of the network and systems.
• Configuration Management of all software development projects for ISO 9001 using Microsoft Visual Source Safe 6.0.
• Optimized Network / link uptime and traffic.
• Identified vendors to procure equipment ensuring cost efficiency and long-term post sales support.
• Managed the MIS library and ensuring regular data backups.
• Conducted Security audit, Vulnerability Assessment, Log monitoring and Patch management on Servers and workstations at regular intervals.
• Installed and configured VPN, firewall, Windows Terminal Services Clients, and SSL for hosting and remote administration of offshore projects.

Applitech Solution Limited, Ahmadabad                                                                        Nov 1998 – Sep 2000

Network Engineer

A CMM Level 3, Software Development Company.

• Provided hardware and networking support for Windows NT servers in multiple domains.
• Planned and carried out activities to upgrade the network/ install new devices, servers, operating systems and application software for multiple software development projects.
• Also executed networking projects for external clients, ensuring their timely completion.

• Post Graduate Diploma in Business Administration (DLP) - Distinction                     (2007-08)

Welingkar Institute of Management Development and Research

• Diploma in Computer Engineering – Distinction                                                             (1991-94)

Government Polytechnic, Gandhinagar

Professional Certifications:

• Certified Information Systems Security Professional (CISSP), ISC2                           (Since Jun 2003)
• Certified Information Security Manager (CISM), ISACA                                                 (Since Oct 2007)
• ISO 27001:2005 LA                                                                                                               (Jun 2009)
• Certificate for Cloud Security Knowledge (CCSK) by CSA                                              (Sep 2010)         
• Certified Ethical Hacker (CEH) by EC-Council                                                                  (Apr 2004)
• ITIL v2Foundation Certified by EXIN                                                                                  (Dec 2006)