Cybersecurity Analyst · Senior · 10+ yrs

Gurpreet Singh Bedi

Head of Security Operations / SOC Director

Professional summary

Security leader with 13 years building and running security operations across banking, fintech and global SaaS. Sets enterprise security strategy and architecture, leads a 22-person SOC and threat-intelligence org, and reports cyber risk to the board and audit committee. Drove ISO 27001 and SOC 2 certifications, slashed incident dwell time and breach exposure, and owns a multi-crore security budget with measurable risk-reduction outcomes.

45k

Endpoints under defense

₹2.6Cr

Annual tooling cost saved

22

SOC analysts led

Skills

Leadership & strategy

Security strategy & architectureSOC leadership (22)Board & audit-committee reportingBudget ownership (P&L)Vendor & MSSP management

Governance & risk

ISO 27001SOC 2NIST CSFPCI-DSSRBI / DPDP complianceEnterprise risk managementThird-party risk

Detection & response

SIEM strategy (Splunk ES, Sentinel)Threat intelligenceIncident response & crisis managementRed/purple teamingThreat hunting

Architecture

Zero TrustCloud security (AWS, Azure)Firewalls & segmentationIAM/PAMVulnerability & penetration-testing programs

Work experience

Head of Security Operations (Deputy CISO) · Meridian Bank

Feb 2019Present

Gurugram

  • Lead a 22-person SOC, threat-intel and vulnerability-management org defending 45,000 endpoints and 60M+ daily events across retail and corporate banking.
  • Set the 3-year security strategy and architecture roadmap; cut mean time to respond 58% and reduced material-incident exposure to zero confirmed breaches over 4 years.
  • Own a ₹14 crore annual security budget; consolidated 9 tools into a unified SIEM/SOAR/EDR stack, saving ₹2.6 crore/year while improving coverage.
  • Led the enterprise ISO 27001 and SOC 2 Type II certifications and quarterly RBI cyber-resilience reporting, clearing audits with zero major non-conformities.
  • Report quarterly cyber risk to the board and audit committee; built the KRI dashboard that frames risk in business and financial terms.
  • Established a purple-team and penetration-testing program that found and remediated 5 critical attack paths before exploitation.

SOC Manager / Lead Security Analyst · Polaris Payments

May 2015Jan 2019

Mumbai

  • Built a 24x7 SOC from the ground up — staffing, SIEM (Splunk) deployment and playbooks — achieving PCI-DSS Level 1 compliance for a payments platform handling ₹40,000 crore/year.
  • Cut incident dwell time 64% by introducing tiered triage, threat hunting and automated containment.

Security Analyst → Senior Analyst · Earlier roles — Wipro, TCS

20122015

India

  • Delivered vulnerability assessments, firewall hardening and incident response for enterprise clients; promoted twice for technical depth and client trust.

Education

B.Tech Information Technology

2012

Punjab Engineering College (PEC), Chandigarh

Certifications

CISSP

ISC2 · 2018

CISM

ISACA · 2020

ISO/IEC 27001 Lead Auditor

PECB · 2019

Selected achievements

Maintained zero confirmed material breaches across 4 years while defending 45,000 endpoints and 60M+ daily events.

Saved ₹2.6 crore/year by consolidating 9 security tools into a unified SIEM/SOAR/EDR platform.

Led enterprise ISO 27001 and SOC 2 Type II certifications with zero major non-conformities.

Speaker, Nullcon Goa 2024 — "Reporting cyber risk the board will actually act on."

See the work in 3D

Explore Gurpreet's interactive WebGL portfolio — projects, skills and a way to get in touch.