Gopal Baliga

I have worked on different capabilities within my role (over the last 6 years)

Security Assessment - Conducted security assessments of applications, infrastructure, and cloud solutions to identify risks, recommend mitigations, and improve overall security posture based on Security Principles.
Data Loss Prevention - Implemented Data Loss Prevention (DLP) controls across endpoints, email, cloud applications, and web traffic to protect sensitive information.
Web-Protection - Led the deployment and optimization of Secure Web Gateway (SWG) and Secure Service Edge (SSE) solutions, improving web security, user protection, and policy enforcement.
Information Classification - Worked with information classification standards and sensitivity labeling to support secure data handling and regulatory compliance.
Incident Response - Supported security incident investigations by analyzing alerts, coordinating with stakeholders, and driving containment and remediation activities.
Security Standards - Maintained security standards, baselines, (the remainder of this line is cut off in the screenshot and isn't visible).
End-user Device Security - Managed endpoint protection using Microsoft Defender for Endpoint, Intune, and security baselines to strengthen endpoint resilience.

• Built and operationalized ISMS; steered internal audit programme and passed external certification audit with zero major findings
• Interviewed CTO and process owners to align context, objectives and risk appetite; delivered risk‑treatment plan approved by board.
• Developed phishing‑simulation and awareness training

• Optimised service catalogue, incident, change and problem processes, automating KPIs in Power BI
• Lead Change Advisory Board
• Analyzed recurrent incident patterns, producing RCA reports using "5 why" process

• Delivered ITSM process‑improvement projects for telecom client, accelerating time‑to‑market for new services
• Managed client relationships through regular check-ins and updates on project progress.