Summary
Overview
Work History
Education
Skills
Websites
Certification
Specialized In
Awards
Timeline
Generic
Rajesh Rasiah

Rajesh Rasiah

IT Security, Governance, Risk And Compliance

Summary

Counting 20+ years of experience in leadership roles, I have created innovative business solutions for clients across a variety of industries, including technology, entertainment, banking, and healthcare. My expertise lies in cloud computing, information management, application development, and virtualization. As the VP of IT Risk - Cloud and Regulatory at Bloomberg ASEAN/APAC, I have successfully managed the entire Cloud Security GRC engagement lifecycle, from envisioning and proposal development to delivery and sales. Additionally, I have lived and worked in different countries, such as the UAE, Singapore, Hong Kong, and Malaysia. I'm passionate about learning new technologies and trends and sharing my knowledge and expertise with others.

Overview

28
28
years of professional experience
6
6
years of post-secondary education
28
28
Certifications

Work History

Head of IT Security Operations, PMO and GRC

TASA Solutions
09.2022 - Current
  • Responsibilities as a Head of IT Security Operations: Overall in charge of TASA’s own Cloud Computing Tool, ERP and CRM software developments
  • In charge of TASA Group’s entire IT Security Operations
  • Maintain and optimize local company networks and servers (AWS and AZURE)
  • Responsible for device and password management (IAM)
  • Oversee data backup and system security operations (e.g
  • User authorization, firewalls)
  • Manage installations, upgrades and configurations of hardware and software
  • Resolve issues escalated by technicians, vendors and engineers
  • Ensure data is handled, transferred or processed according to legal (PDPA, GDPR, PII) and company guidelines
  • Control costs and budgets regarding IT systems
  • Manage contracts with vendors (e.g
  • Development platforms, telecommunication companies, password managers) and software licenses
  • Develop IT policies and practices
  • Managing ISO27001: IT Risk Register as per CIA Triad
  • Responsible for BCP and DR
  • Responsibilities as a Governance, Risk and Compliance Officer: ISMS Compliance Audit, ISO 27001, 9001, PDPA
  • Preparing and Implementing Compliance Procedures/ Controls
  • IT Audit
  • Incidence Response
  • Cloud Regulatory Compliance
  • Cloud Security
  • ESG
  • DATA Governance
  • Asset Inventory Management (Mission-critical information assets)
  • As a PM for Call Centre project delivery: Responsible for delivering & owning the project success both internally & externally
  • Fully understanding & managing the customers’ requirements, objectives & timescales
  • Create practical project structures to ensure project success & simplicity of management
  • Manage & lead a team based on the requirements of the business & workload and ensure to maximize people utilization & efficiency
  • Collaborate with senior leadership & regional counterparts to develop innovative new practices to deliver customer objectives in the most efficient manner.

FinTech Consultant / Adviser

Fintech Association of Sri Lanka(FASL)
02.2021 - Current
  • Advising the Sri Lankan government on new FINTECH innovations, providing updates on FINTECH payment gateway regulations, and conducting audits
  • Oversee/Adviser of the Cyber Criminal Breach Control Policies section of FASL
  • Work closely with Sri Lanka’s payment gateway and cross-border transaction monitoring to develop digitalization tools.

Chief Compliance and Risk Officer (Cloud Security - GRC)

Dygisec PTE LTD
02.2021 - 09.2022
  • Built a Cloud Native Platform to detect, investigate, and respond to threats with advanced security and analytics. The product has been acquired by Google Cloud.
  • Responsible as an SME for Dygisec’s Compliance Engine TRITON’s up-to-date Regulatory Compliance Frameworks and Best Practices and Risk Management
  • Certified and functioning as a CISA, CISM, Regulatory Audit and Implementation, end to end support for achieve Regulatory Compliance regulations
  • Ie: PCI DSS, BASEL III, GDPR, HIPAA, ISO 27001:2013 (ISMS), ISO9001, PII, NIST, SOC 2, MITRE Attack and Country Regulations ie: MAS and CSA Singapore.

VP & AVP – IT Security Risk | Compliance

Bloomberg ASEAN - APAC
01.2012 - 01.2021
  • Bloomberg ASEAN in the APAC region, I served as both the Chief Security Risk Officer and Chief Security Architect
  • I was responsible for creating a regulatory monitoring tool that followed industry best practices
  • Due to the tool’s effectiveness, the Bloomberg APAC region was able to save millions of dollars that would have otherwise been spent on IT security vendors
  • Risk Monitoring & Reporting: Fraud Risk Management by using BASEL software: Identifying and monitoring risks
  • Advising on the required controls and follow through on implementation
  • Assessing and mitigating significant competitive, regulatory and technological threats (Bloomberg’s capital and earnings)
  • Risk Data (Financial) - Maintaining the risk register database to ensure accurate risk data and reporting (Basel Tools)
  • Monitoring liability reporting process for risk management program and creating policies & procedures to support the program
  • Compliance Management and Control: Monitoring and reporting their effectiveness and ensuring compliance with its regulatory requirements (KYC, AML, FIU, STR, FATF, CTR) and internal policies
  • Advise on compliance matters, relevant laws and regulations
  • Identify major risk factors (product, compliance, and operational)
  • Lead in developing and coordinating the implementation of strategies to reduce regulatory risk
  • Led to document and maintain the Company’s Compliance Manual, SOP inclusive for all operational and administrative matters
  • Oversee monitoring and investigation of unusual trends or activities that can be indicative of compliance problems
  • Prepare reports for executive management and governance reviews and assist with other high-level general compliance activities as needed
  • Perform compliance assessments to ensure that internal policies, procedures and practices are in line with external regulatory requirements (KYC, AML, FIU, STR, FATF, CTR).

Branch Manager and Manager OPS & IT, Risk Reporting, AML, Corporate Banking

Abu Dhabi Commercial Bank
01.2005 - 01.2011

Client Relationship Manager

UAE Exchange
01.2002 - 12.2004

Junior Executive

Seylan Bank PLC
06.1996 - 12.2002

Education

Ph.D. - Financial Technology and Digitalisation

Harvard University
09.2014 - 04.2020

Master of Business Administration - MBA - Specialized - Banking and Finance

The International University of Missouri-Columbia
Dubai, UAE

Bachelor of Business Management – BBM -

The Open University of Sri Lanka
Sri Lanka

Bachelor of Commerce - BCom - Commerce and Management

Chhatrapati Shahu Ji Maharaj University
India

Skills

Cloud Security Providers Cyber Security

undefined

Certification

Certified Financial Risk Manager (FRM)

Specialized In

  • IT Governance
  • Compliance & Governance
  • Google Cloud Security
  • AWS Cloud Security
  • Azure Cloud Security
  • Cloud Security Tools Development
  • Cyber Threat Monitoring
  • Malicious activity monitoring
  • ISO ISMS 27001:2013
  • PCI DSS
  • BASEL III
  • HIPAA
  • GDPR
  • PII
  • SOC 2
  • NIST
  • Mitre Attack
  • CSP best practices

Awards

  • Blue and white (College Colours) - St. Josephs College, Col 10
  • Best Branch Manager (aspiring) - ADCB

Timeline

Head of IT Security Operations, PMO and GRC

TASA Solutions
09.2022 - Current

FinTech Consultant / Adviser

Fintech Association of Sri Lanka(FASL)
02.2021 - Current

Chief Compliance and Risk Officer (Cloud Security - GRC)

Dygisec PTE LTD
02.2021 - 09.2022

Ph.D. - Financial Technology and Digitalisation

Harvard University
09.2014 - 04.2020

VP & AVP – IT Security Risk | Compliance

Bloomberg ASEAN - APAC
01.2012 - 01.2021

Branch Manager and Manager OPS & IT, Risk Reporting, AML, Corporate Banking

Abu Dhabi Commercial Bank
01.2005 - 01.2011

Client Relationship Manager

UAE Exchange
01.2002 - 12.2004

Junior Executive

Seylan Bank PLC
06.1996 - 12.2002

Master of Business Administration - MBA - Specialized - Banking and Finance

The International University of Missouri-Columbia

Bachelor of Business Management – BBM -

The Open University of Sri Lanka

Bachelor of Commerce - BCom - Commerce and Management

Chhatrapati Shahu Ji Maharaj University
Rajesh RasiahIT Security, Governance, Risk And Compliance