Akshay Suryawanshi

Lead Information Security Engineer & Acting Team Lead

Cloud Security · Security Architecture · AI Security · GRC

I build and lead end-to-end security programs for enterprise platforms operating across the US, Europe, Australia, and New Zealand — across multi-cloud environments.

Currently securing National Pen (a Cimpress company) — 3,000+ employees across 22 countries. Exploring new opportunities — India & Global | Remote · Hybrid.

CISM CompTIA Security+ AWS Solutions Architect Associate AWS AI Practitioner AZ-500

Impact

Outcome-focused initiatives across security operations, governance, and program leadership

Led 6 P1 security incidents end-to-end in FY26 — including a third-party supply-chain compromise and an enterprise cloud environment breach — coordinating response across the BU and Cimpress Group Security
Reduced phishing click-through rates by 65% through a simulation and awareness program covering 3,000+ employees across the US, Europe, Australia, and New Zealand
Authored the enterprise AI Usage & Governance Policy — aligning with NIST AI RMF and EU AI Act requirements — governing ChatGPT, Copilot, and Gemini usage across the organization
Designed and implemented cloud security architecture assessments and threat modeling across AWS, Azure, and OCI — evaluating, approving, or rejecting new solutions from a security perspective
Own the GRC program for the business unit — aligning controls with ISO 27001, SOC 2, NIST CSF, GDPR, CCPA, and managing quarterly SOX User Access Reviews
Initiated the developer security training program via Snyk — driving SSDLC adoption and coordinating code vulnerability remediation across all development teams
Authored the Security Architecture Best Practices document — serving as the security baseline for all new solution designs and architecture reviews across the business unit
Built and lead the BU InfoSec team — hiring, mentoring PR1–PR3 engineers, running daily operations, and presenting security roadmaps to the Extended Leadership Team

Built and own the threat modeling program using STRIDE methodology — collaborating with Application and SRE teams on data flow diagrams and remediation tracking
Manage the vulnerability management program — leading weekly review cadences, prioritizing remediation using CVSS and asset criticality, and driving measurable posture improvements
Conduct vendor and third-party security assessments independently — providing formal approval or rejection; where business justification overrides rejection, risks are documented in the Risk Register
Own and maintain the Risk Register — managing risk identification, assessment, treatment plans, and formal Risk Acceptance workflows with stakeholders and leadership

Infrastructure & Cloud Impact

Security-first cloud architecture, governance, and large-scale migrations

                            
Cloud Cost Optimization
                                $240K+
                                Annual Cost Savings
                            
                                33%
                                Infrastructure Cost Reduction

Migration & Scale

                                500+
                                Servers Migrated to AWS
                            

Security-first cloud migration approach

Case Studies

Selected initiatives shown as Problem → Approach → Outcome

Incident Response — Enterprise Supply-Chain Attack

Led end-to-end response to a third-party supply-chain compromise affecting enterprise infrastructure.

AI Governance — Enterprise AI Usage & Governance Policy

Authored the organization's first AI governance policy — aligning with NIST AI RMF and EU AI Act.

Cloud Security — AWS Network Security Hardening

Led AWS network security hardening — designing phased NACL controls and tightening Security Group port restrictions across the cloud environment.

Human Risk — Phishing Simulation Program

Designed and executed a phishing program that reduced click-through rates by 65%.

Threat Modeling — STRIDE Implementation for Cloud Applications

Built the threat modeling program from scratch using STRIDE methodology.

More case studies coming soon →

Core Domains

Specialized expertise across seven key security domains

Cloud Security

Independent cloud security assessments across AWS, Azure, and OCI — covering IAM, network segmentation, compute hardening, logging, and monitoring.

Security Architecture & Threat Modeling

Independently evaluate, approve, and reject new solutions and architectures from a security perspective. Perform threat modeling as part of security architecture reviews.

Vulnerability Management

End-to-end vulnerability management program — scanning, risk-based prioritization using CVSS and asset criticality, SLA-driven remediation, and executive reporting.

Incident Coordination

Coordinate incident response across the business unit (3,000+ employees, multiple countries (US, EU, Australia etc.), liaising with Cimpress SOC for investigation and driving remediation.

Governance, Policy & Vendor Security

Policy authoring, SOPs, and security framework ownership for the BU. Risk Register management and Risk Acceptance workflows. Vendor security assessments with formal approval/rejection authority. SOX User Access Reviews (quarterly). Compliance alignment with ISO 27001, NIST CSF, GDPR, CCPA, and SOC 2.

AI Security & Governance

Authored the enterprise AI Usage & Governance Policy aligned with NIST AI RMF and EU AI Act. Govern adoption of ChatGPT, Copilot, and Gemini across the organization. Define data-handling rules, prohibited use cases, and approval workflows for new AI tools.

SSDLC, Code Security & Supply Chain Security

Driving secure development lifecycle adoption via Snyk, managing dependency vulnerability remediation with dev teams, and securing the software supply chain.

Projects & Key Initiatives

Delivering Measurable Outcomes Across Security & Infrastructure

Information Security

AI-Driven SOC Triage Automation

~50% faster triage 200+ daily alerts processed

Built intelligent L1 alert triage workflow reducing manual investigation by ~50% through AI and automation.

AI Usage & Governance Policy

Org-wide policy Responsible AI adoption

Authored the organization's AI Usage and Governance Policy, establishing guardrails for responsible and secure AI adoption across the business unit.

NIST-Aligned Incident Response Program

NIST aligned P1-P4 workflows

Developed comprehensive IR framework with defined RACI, escalation workflows, playbooks, and metrics.

Multi-Cloud Security Architecture Reviews

40% reduced attack surface 3 Clouds AWS/Azure/OCI

Conducted comprehensive security assessments across AWS, OCI, and Azure reducing attack surface significantly.

Vulnerability Management Program

60% backlog reduction 7-day critical SLA

Established the business unit vulnerability management program with risk-based prioritization and SLA-driven remediation.

Security Awareness & Phishing Simulation Program

65% click rate reduction 95%+ training completion

Implemented comprehensive security awareness training with monthly phishing simulations reducing click rates by 65%.

Penetration Testing Remediation Coordination

100% critical SLA met

Coordinated annual penetration testing remediation efforts with enterprise pentest team, driving cross-functional fixes for critical vulnerabilities.

Threat Intelligence Operationalization

40% faster detection 3+ TI platforms

Operationalized enterprise threat intelligence platforms for the business unit, enabling proactive threat detection and dark web monitoring.

Firewall Security Review & Rule Optimization

35% rules reduced 1000+ rules reviewed

Conducted comprehensive firewall security reviews to identify misconfigurations, optimize rulesets, and reduce attack surface.

GRC

Global Retention Policy & Data Governance

30% storage savings GDPR/CCPA compliant

Led organization-wide data retention policy project ensuring compliance with GDPR, CCPA, and industry regulations.

ISO 27001 & Compliance Framework

Zero critical findings 60% faster audit prep

Aligned security program with ISO 27001, NIST CSF, and CIS Controls for audit readiness and continuous compliance.

Executive Security Metrics & Dashboards

C-level reporting Data-driven decisions

Built comprehensive security KPI dashboards for C-level executives and board reporting.

Architecture Best Security Practices

Org-wide baseline Security-by-Design

Authored the Architecture Best Security Practices document, serving as the security baseline for all new solution designs across the business unit.

Infrastructure: Windows Server (2000-2022), On-Premise, Virtual & Cloud Engineering

AWS Large-Scale Migration (Hundreds of Servers)

500+ servers migrated Zero downtime

Led end-to-end migration of 500+ on-premises servers to AWS using Application Migration Service.

Cloud Cost Optimization Initiative

33% cost reduction $240K annual savings

Achieved 33% reduction in AWS infrastructure costs through rightsizing, reserved instances, and resource optimization.

Windows Server Administration & Management (2000-2022)

10,000+ users 8+ years experience

Comprehensive Windows Server administration across multiple versions (2000-2022) with enterprise-scale deployment and management.

Virtualization & Data Center Management

200+ VMs managed 99.9% uptime

Managed enterprise virtualization platforms (VMware ESXi/vSphere, Nutanix) supporting 200+ VMs with high availability.

Active Directory & Identity Management

3,000+ users Hybrid identity

Managed enterprise Active Directory infrastructure for 3,000+ users with Azure AD hybrid integration.

Microsoft 365 & Exchange Administration

Enterprise scale DLP enabled

Managed enterprise M365 environment including Exchange Online, SharePoint, and Teams for organization-wide collaboration.

Leadership

Building teams. Owning programs. Translating security risk into business decisions.

Team Building

Rebuilt the BU InfoSec team after multiple departures — creating job descriptions, leading the hiring process for Senior InfoSec Engineers, and mentoring team members from PR1 to PR3 level. Currently leading a team across L1, L2, and L3 security functions.

Stakeholder Management

Present security roadmaps, metrics, and initiative progress to the Extended Leadership Team (ELT). Manage upward through the CTO chain — reporting to the Senior Manager of InfoSec, who reports to the Sr. Director of Technical Services, who reports to the CTO.

Program Ownership

Own the complete information security program for a business unit with 3,000+ employees operating across the US, Europe, Australia, and New Zealand. The BU security team operates largely independently — handling SOC, DFIR, threat intelligence, GRC, and cloud security — with Cimpress Group Security engaged for P1/P2 escalations.

Risk-to-Business Translation

Translate technical security risks into business language for leadership. Own formal risk acceptance workflows where business justification overrides security recommendations — ensuring risks are documented, tracked annually, and reviewed with stakeholders.

Professional Experience

8+ Years of Progressive Growth from Infrastructure to Security

A deliberate career pivot — from desktop support and Windows Server administration into virtualization, then cloud engineering, then security. Each prior layer of the stack is now first-hand context for security architecture decisions, threat modeling, and incident response.

Lead Information Security Engineer

(Acting Team Lead)

Team Leadership Program Owner Global Scope

Key Impact

Coordinate Incident Response and security operations across a 3,000+ employee organization spanning multiple countries (US, EU, Australia etc.), liaising with Cimpress SOC for investigation and driving remediation with business unit stakeholders
Reduced phishing click rates by 65% through security awareness program
Cut critical vulnerability backlog by 60% via risk-based prioritization
Built executive security dashboards enabling data-driven investment decisions
Achieved zero critical audit findings through alignment with global security frameworks and regulatory acts

Scope of Responsibility

Lead an InfoSec team — running daily standups, 1:1s, mentoring junior team members, and driving complete security operations
Independently conduct cloud security architecture assessments and threat modeling across AWS, Azure, and OCI
Independently evaluate, approve, and reject new solutions and architectures from a security perspective
Manage end-to-end vulnerability management program with SLA-driven remediation
Coordinate incident response across the business unit, liaising with enterprise SOC for investigation
Operationalize threat intelligence tooling (Flare.io, Cyble, Google Threat Intelligence) for the business unit
Coordinate penetration testing remediation and retesting with enterprise pentest team
Own and maintain the business unit Risk Register — managing risk identification, treatment plans, formal Risk Acceptance workflows with stakeholders, and annual review cycles for accepted risks
Manage SOX User Access Reviews on a quarterly basis, coordinating access certifications across systems to meet SOX compliance requirements
Author and maintain security policies, SOPs, and security frameworks for the business unit, aligned with ISO 27001, NIST CSF, SOC 2, GDPR, and CCPA
Advise and guide teams on implementing security controls across AWS, Azure, and OCI environments, providing hands-on technical guidance beyond architecture reviews
Drive security awareness program with phishing simulations for 3,000+ employees
Present security posture updates to C-level executives and board

Architecture & Workflow

SOC Stack: CrowdStrike EDR → Hunters SIEM → Automated triage workflow → Jira ticketing
Threat Intel Pipeline: Multi-source intel (Flare.io, Cyble, GTI) → IOC enrichment → Actionable alerts → Business unit response
VM Workflow: Tenable + Orca scanning → CVSS + Criticality + Exploitability scoring → Risk-based prioritization → SLA tracking
Cloud Security: Independent architecture reviews and threat modeling across AWS, Azure, and OCI covering IAM, network segmentation, compute hardening, and API security

Tools & Technologies

CrowdStrike Hunters SIEM Tenable Orca Security Flare.io Cyble Google Threat Intelligence Snyk Keeper Power Automate Jira AWS Azure OCI

Security Decisions & Trade-offs

AI-assisted triage vs. manual review: Implemented AI for L1 triage to reduce analyst fatigue while maintaining human oversight for high-severity alerts
Risk-based VM prioritization: Balanced CVSS scores with business criticality and exploitability to focus resources on highest-impact vulnerabilities
Password manager migration: Selected Keeper over alternatives for enterprise features, SSO integration, and compliance requirements
Multi-cloud security: Standardized security baselines across AWS, Azure, and OCI while respecting platform-specific best practices

Outcomes & Learnings

Reduced MTTD by 35% and MTTR by 40% through automated triage and enrichment
Achieved 95%+ completion rate for security awareness training
Successfully migrated 3,000 users from LastPass to Keeper with zero security incidents
Passed external security audits with zero critical findings
Key learning: Security metrics drive executive buy-in — dashboards helped leadership prioritize and support security initiatives.

Lead Cloud Engineer

Migration Lead Cost Owner

Key Impact

Migrated hundreds of servers to AWS with zero downtime
Saved $240K/year through cloud cost optimization ($60K → $40K/month)
Enabled remote workforce with AWS Workspaces for 500+ users

Migration Architecture

Migration Strategy: Phased lift-and-shift using AWS Application Migration Service (MGN) with post-migration optimization
Source: On-premises VMware/Nutanix → Target: AWS EC2 with proper VPC design
Storage: Local storage → S3, FSx for Windows, EBS optimized volumes
Database: On-prem SQL → RDS with Multi-AZ for high availability
Remote Access: VPN + AWS Workspaces for secure remote workforce enablement

Tools & Technologies

AWS MGN EC2 S3 FSx RDS AWS Workspaces VPC AWS Systems Manager CloudWatch AWS Backup

Decisions & Trade-offs

Lift-and-shift vs. re-architect: Chose MGN for speed; modernization planned as Phase 2
Reserved vs. on-demand: Analyzed usage patterns to purchase RIs for steady-state workloads, saving 33%
Multi-AZ vs. single-AZ: Multi-AZ for production RDS, single-AZ for dev/test to balance cost and availability

Outcomes

Zero-downtime migration through careful cutover planning and testing
Reduced monthly costs from $60K to $40K (33% savings = $240K/year)
Established automated backup and DR with AWS Backup
Implemented tagging strategy for cost allocation and chargeback

Senior Systems Engineer

Infrastructure Owner

Key Impact

Owned VM infrastructure supporting 200+ systems across VMware ESXi/vSphere and Nutanix
Led complex migrations: P2P, P2V, V2V, V2C with minimal downtime
Accountable for 99.9% uptime across critical infrastructure

Systems Engineer

Key Impact

Owned Windows Server ecosystem spanning versions 2003-2022
Implemented hybrid identity with Azure AD Connect and Intune
Deployed enterprise monitoring using SolarWinds for proactive alerting

Server Engineer

(Client: Leading Media Company)

Key Impact

Administered Windows Server for enterprise media infrastructure
Managed Microsoft 365 and Group Policy for 500+ users
Maintained VMware infrastructure ensuring availability and performance

Senior Engineer (Server Management)

(Client: Leading Insurance Company)

Key Impact

Managed Active Directory and DC replication for enterprise environment
Drove SCCM patching operations ensuring compliance posture
Owned O365 and infrastructure monitoring for proactive incident management

Desktop Support Engineer

(Client: Leading Banking & Investment Management Company)

Key Impact

Led EOSL migration for 2,000+ systems ensuring business continuity
Delivered end-user technical support for banking operations
Managed IT assets and vendor relationships for hardware lifecycle

Certifications

Industry-Recognized Credentials & Qualifications

NEW

CISM

ISACA

Certified Information Security Manager

Issued Sep 2025 · Expires Jan 2029

Verify

AWS AI Practitioner

Amazon Web Services

Certified AI Practitioner

Issued Dec 2024 · Expires Dec 2027

Verify

AWS Solutions Architect

Amazon Web Services

Solutions Architect – Associate

Issued Jul 2024 · Expires Jul 2027

Verify

CompTIA Security+

CompTIA

Security Fundamentals Certification

Issued May 2024 · Expires May 2027

Verify

Azure Security Engineer

Microsoft

Azure Security Engineer Associate

Issued May 2024 · Expires May 2027

Verify

Get In Touch

Open to Information Security Roles & Collaboration

Email

Phone

Location

Mumbai, India

linkedin.com/in/akshay-suryawanshi

Availability

Open to India & Global · Remote · Hybrid roles

Open to Opportunities

Open to roles in Cloud Security, Security Architecture, AppSec & SSDLC, GRC, and Security Program Management at Lead, Manager, or Senior Engineer level — in India and Global — Hybrid · Remote

Akshay Suryawanshi

Impact

Infrastructure & Cloud Impact

Cloud Cost Optimization

Migration & Scale

Case Studies

Incident Response — Enterprise Supply-Chain Attack

Problem

Approach

Outcome

Tools & Frameworks

AI Governance — Enterprise AI Usage & Governance Policy

Problem

Approach

Outcome

Tools & Frameworks

Cloud Security — AWS Network Security Hardening

Problem

Approach

Outcome

Tools & Frameworks

Human Risk — Phishing Simulation Program

Problem

Approach

Outcome

Tools & Frameworks

Threat Modeling — STRIDE Implementation for Cloud Applications

Problem

Approach

Outcome

Tools & Frameworks

Core Domains

Cloud Security

Security Architecture & Threat Modeling

Vulnerability Management

Incident Coordination

Governance, Policy & Vendor Security

AI Security & Governance

SSDLC, Code Security & Supply Chain Security

Projects & Key Initiatives

Information Security

AI-Driven SOC Triage Automation

Challenge

Solution

Key Accomplishments

AI Usage & Governance Policy

Challenge

Solution

Key Accomplishments

NIST-Aligned Incident Response Program

Challenge

Solution

Key Deliverables

Multi-Cloud Security Architecture Reviews

Challenge

Solution

Key Accomplishments

Vulnerability Management Program

Challenge

Solution

Key Accomplishments

Security Awareness & Phishing Simulation Program

Challenge

Solution

Key Accomplishments

Penetration Testing Remediation Coordination

Scope

Key Accomplishments

Threat Intelligence Operationalization

Challenge

Solution

Key Accomplishments

Firewall Security Review & Rule Optimization

Challenge

Solution

Key Accomplishments

GRC

Global Retention Policy & Data Governance

Challenge

Solution