Vikram Sathish ASOKAN

• Secured multi-million–dollar cybersecurity investments by building ROI-driven business cases for ISO/NIST control maturity uplift, GDPR compliance, SIEM expansion and endpoint protection modernization across multi-region environments.

• Strengthened cyber resilience by reducing audit findings by ~30–40% and improving control maturity by ~25–35% across access control, vendor security, and data protection domains.

• Reduced vendor and third-party cyber risk exposure by ~20–30% through structured due diligence, contractual security control expectations, and continuous MSP/MSSP performance monitoring.

• Lowered phishing susceptibility and incident recurrence by ~15–25% via global cyber awareness campaigns, simulated phishing exercises, and endpoint hardening across hybrid and multi-cloud estates.

• Matured incident readiness by designing and facilitating executive-level crisis tabletop exercises, strengthening escalation criteria, communication playbooks, and cross-regional response coordination.

• Enabled secure digital transformation by partnering with CIO/CTO functions to embed DevSecOps guardrails, data protection controls and security architecture checkpoints across cloud migration and platform modernization programs.

• Improved board transparency and decision-making with risk quantification models and KPI dashboards, enabling informed prioritization and funding of cyber initiatives.

• Lead enterprise-wide cybersecurity and IT risk governance across multi-cloud and hybrid environments, establishing a strategic roadmap aligned to business and regulatory needs.

• Conduct NIST CSF and ISO 27001 maturity assessments and drive company-wide control uplift, funding prioritization, and implementation accountability.

• Direct vulnerability and threat exposure management through continuous risk monitoring, remediation tracking, and penetration testing oversight.

• Advise executive leadership and audit committees on cyber posture, investment requirements, and resilience improvement priorities.

• Own organizational data protection and privacy programs (GDPR, PDPO), including policy design, control execution, and assurance testing.

• Build crisis readiness by designing and running executive-level tabletop simulations, incident escalation playbooks, and recovery coordination.

KEY METRICS & KPIs

• ↓ ~30–40% reduction in audit findings

• ↑ ~25–35% improvement in security control maturity

• ↓ ~20–30% reduction in vendor security risk exposure

• ↓ ~15–25% reduction in phishing susceptibility and incident recurrence

• Influenced ~USD $500K–$1M in cybersecurity investments (SIEM, EDR/XDR, compliance automation)

• Led 16–25 cross-functional resources across IT, security, risk, compliance, and operations

Professional Experience

1. Head of IT Risk, Cybersecurity & Governance | Bergworx |Feb 2023 – Present |  Hong Kong Asia
2. Senior Consultant | Why Innovation! (Client: Leading Insurance & Bank) |Jan 2022 – Jan 2023 | Hong Kong
3. Project Manager – Technology Risk Transformation | Intelizest Consulting Pvt. Ltd (Client: Oportun Inc) Nov 2019 – Sep 2021 | India / USA
4. Head – Project Management & IT Governance | Infocom IT (HK) Ltd | Dec 2011 – Nov 2019 | Hong Kong
5. Director – Consulting | Tri Inpharmex Services Pvt. Ltd | Apr 2007 – Oct 2011 | India

• Master of Business Administration (MBA) – International Business | Annamalai University, India
• Bachelor of Science (B.Sc) – Chemistry | Bishop Heber College (Bharathidasan University), India
• ISO 27001: 2022 Information Security Management Systems Certified Lead Auditor | TÜV NORD CERT
• Advanced Risk Management, Security Controls & Monitoring | Packt
• Cybersecurity Foundations for Risk Management | Kennesaw State University
• The GRC Approach to Managing Cybersecurity | Kennesaw State University
• Cybersecurity Risk Management Framework | Infosec
• Foundations of NIST Cybersecurity Frameworks | Packt
• NIST CSF | Infosec
• NIST DoD RMF | Infosec
• Risk Assessment and Management in Cybersecurity | Board Infinity 
• Risk Management for Cybersecurity and IT Managers | Packt
• GDPR Compliance: Essential Training |
• Certified Data Protection Officer (GDPR & DPDPA)
• Project Management Professional (PMP)
• ICAgile Certified Professional – Agile Coaching (ICP-ACC)
• ICAgile Certified Professional – Enterprise Transformation (ICP-ENT)
• Professional Scrum Master (PSM-I & II)
• EXIN Agile Scrum Master (ASM)