AI Security Expert · vCISO · Author · YouTuber · Board advisor
I have spent more than twenty years protecting global enterprises, from a Fortune 500 manufacturer to one of India's largest edtech companies. Today I focus on AI security: helping founders and boards adopt AI safely, govern it with confidence, and prove it to the people who buy from them.
Earlier roles at Microsoft · Capita · Mphasis · Symantec
A practitioner who started at the server rack and now sits with the board.
I began in 2004 as a security administrator in Pune, hardening servers for defence-sector projects. Over the next two decades I engineered and secured products at Symantec, Mphasis and Capita, and built and ran global security as CISO at Coforge. I was an early member of the engineering team at WhiteHat Jr, stayed through its exit to BYJU'S, and then joined BYJU'S engineering as Head of Security Engineering and Group CISO. Most recently I led cyber and AI for Cummins India, where I advised board members on cyber risk.
That mix of engineering and law is rare in security: I can read the architecture diagram and the contract clause, and explain both to the board. Along the way I picked up a PhD in cyber and electronic operations and AI, a law degree in cyber law, an MBA in risk management and more than thirty professional certifications. I use all of it for one thing: making security clear enough that a founder, an engineer and a board member can act on it.
Today I am vCISO at SecComply and a board advisor on cyber and AI risk. I also write, co-host The Nadkarnees on YouTube with Shivani Nadkarni, and teach AI Security and Governance on Udemy through my course, Master LLM Security and Responsible AI.
Prompt injection, data leakage through LLMs, AI agents with too much access, shadow AI and new regulation. I help leadership teams see these risks clearly, put the right guardrails in place, and govern AI with frameworks like ISO 42001.
As vCISO at SecComply I run security, compliance and AI governance programmes for growing companies, from first policy to audit day.
Board advisorI help boards understand where AI creates risk and value, ask the right questions, and set direction they can defend to regulators and customers.
Author and educatorTwo security books, plus Master LLM Security and Responsible AI on Udemy, teaching the OWASP Top 10 for LLM applications and how to defend against them.
YouTuberOn The Nadkarnees I break down AI threats like prompt injection and agent hijacking, run live trainings, and talk with CISOs, CTOs and founders.
From Idea to IPO: Security Practices for Every Stage
A practical guide for founders, DevOps teams and IT leads who need strong security from day one: secure coding, cloud, access control, risk, privacy and compliance, matched to each stage of growth. Co-written with Ankit Agarwal.
A Complete Go-to Guide for Beginners
The core of information security, and how to build a career in it: choosing a path, building skills and preparing for interviews.
Protect, optimise and build trustworthy AI systems with practical, industry-ready skills.
For security professionals moving into AI, developers and researchers building with AI, and anyone responsible for using AI safely.
AI and cybersecurity in plain language, with Shivani Nadkarni. 100+ videos on AI security, plus live trainings, explainers and conversations with CISOs, CTOs and founders.
Columns for ComputerWeekly, CIO Insider India and Global Consultants Review, and long-form pieces on LinkedIn.
Executive Member, CyberEdBoard, ISMG's community of C-level security leaders.