Enterprise Security Architect & Risk Leader

…Continued…

Blessen Varghese

516-***-**** • *********@*****.***

• linkedin.com/in/blessen-varghese-cissp-cism-aa2914104 PROFESSIONAL SUMMARY

Transformative Information Security Leader with 20+ years of experience specializing in Enterprise Architecture, Cybersecurity Frameworks, and IT Infrastructure. Proven track record of building secure systems from the ground up, managing corporate Risk Management programs, and executing complex Systems Integration for high-stakes, regulated environments. Adept at aligning deep technical investments with corporate governance, digital transformation, and overarching business growth.

CORE COMPETENCIES & AREAS OF EXPERTISE

Security Governance & Risk: Risk Mitigation, Regulatory Compliance (HIPAA, PCI-DSS, ISO 27001, NIST CSF), Vendor Risk Management, Policy Development, Audit Management, Business Continuity & Disaster Recovery.

Architecture & Infrastructure: Cloud Security Architecture, Secure SDLC, Identity & Access Management

(IAM), Single Sign-On (SSO), Federated Identity, Identity Provisioning, EDR, PAM, Network Infrastructure.

Threat & Vulnerability Management: Vulnerability Assessment, Threat Intelligence, SIEM Optimization, Firewall Policy Management, Incident/Crisis Management, Patch Remediation.

Enterprise Technologies: AWS, Microsoft Azure, VMware Enterprise, Cisco Enterprise Networking, NextGen Firewalls, Multi-Factor Authentication (MFA).

PROFESSIONAL EXPERIENCE

Bloomberg LP, New York, NY 2022 – Present

Security Architect

Trusted advisor to executive and senior leadership on the long-term enterprise security vision, fostering cross- functional alignment across business units to bridge technical initiatives with departmental and organizational goals. Cultivates a culture of risk awareness by instilling robust cybersecurity policies and governance practices throughout all corporate divisions. Streamlines operational efficiency by optimizing vendor risk assessments and software onboarding lifecycle processes across the global enterprise. Provides strategic direction on end-to-end security architecture design, ensuring advanced defense mechanisms and cyber resilience are engineered across all corporate systems, clouds, and technology platforms. Key Achievements:

Led the security risk assessment program for key vendor relationships and third-party providers to systematically identify and mitigate organizational risks.

Engineered and enhanced technical controls, operational procedures, and incident response frameworks to dramatically strengthen organizational cyber resilience.

Anchored full project lifecycles to global security standards, proactively identifying compliance gaps and presenting strategic remediation options directly to leadership.

Led the development and enforcement of corporate security policies, while establishing and monitoring resilience objectives, KRIs, KPIs, and governance frameworks.

Architected advanced identity management ecosystems leveraging single sign-on (SSO), federated identity frameworks, role-based authorization, and automated identity provisioning Blessen Varghese

Page Two

…Continued…

Madison Square Garden Entertainment, New York, NY 2020 – 2022 Security Solutioning & Architecture

Technical leader driving institutional resilience through comprehensive gap assessments across enterprise processes and security technologies to isolate and remediate underlying risks. Collaborates with cross-functional teams to align security initiatives with corporate objectives, while acting as the Subject Matter Expert (SME) on secure cloud adoption to ensure infrastructure scaling complies with all regulatory mandates. Key Achievements:

Architected an enterprise Vulnerability Management Program to systematically quantify organizational risk and establish remediation protocols with technology teams.

Secured and maintained continuous PCI compliance for critical business applications migrated to cloud infrastructure.

Spearheaded strategic roadmaps to elevate the organization's security posture through the adoption of emerging technologies and modern defense methodologies.

Diagnosed critical security risks and engineered mitigation strategies that fortified institutional resilience against advanced cyber-attacks and security incidents. ReactiveCore, New York, NY 2018 – 2020

Security Architect

Formulate, implement, and govern enterprise-wide security strategies ensuring strict alignment with HIPAA and NIST CSF regulations. Oversee comprehensive security audits across organizational processes and critically evaluate software development and infrastructure changes to proactively mitigate architecture risks. Serve as a strategic partner to the IT team, synchronizing all cybersecurity initiatives with the company’s short- and long-term business vision.

Key Achievements:

Cultivated a security-first culture that aligned security leadership, business units, and employees under unified protocols.

Architected and standardized an enterprise Information Security Program, embedding automated security checks into the SDLC.

Established a formal Security Board to deliver strategic risk recommendations directly to executive leadership.

Directed internal/external penetration testing and phishing simulations to mature incident response and workforce threat awareness.

Authored and deployed organization-wide security awareness training, drastically improving compliance rates.

Optimized cloud workflows by engineering automated security pipelines to eliminate manual oversight. Blessen Varghese

Page Three

Healthix, New York, NY 2018

Senior Network Architect

Managed IT infrastructure, endpoint security, and enterprise access utilizing RSA SecurID while evaluating emerging threats through traffic trends with RSA Security Analytics SIEM. Executed IT risk assessments and working cross- functionally to develop security plans.

Key Achievements:

Reviewed and updated security configurations and policies to comply with Cybersecurity Frameworks and industry best practices.

Developed corporate disaster recovery plan for critical IT Infrastructure leveraging an on-premises data center and AWS.

Perimeterwatch Technologies, Inc., Astoria, NY 2007 – 2017 Infrastructure Manager

Direct an engineering team focused on managing multi-tenant infrastructures, capturing business requirements, and architecting customized technical solutions for diverse client portfolios. Deploy comprehensive content and web filtering firewalls, build robust routing and switching solutions, and establish governance policies to ensure seamless, secure environment transitions. Author and facilitate targeted security awareness programs and social engineering simulations to eliminate workforce skill gaps. Oversee continuous compliance for PCI, HIPAA, and ISO standards by spearheading rigorous IT audits and orchestrating technical vulnerability assessments, risk management, and patch remediation cycles.

Key Achievements:

Architected multi-factor authentication (MFA) frameworks utilizing token-based, email, and mobile device protocols to elevate access security.

Hybridized infrastructure footprints by seamlessly integrating AWS, Microsoft Azure, and VMware vCloud into existing physical network frameworks.

Centralized threat intelligence operations through the deployment and fine-tuning of enterprise SIEM tools, including IBM QRadar, LogRhythm, Splunk, and AlienVault.

Overhauled disaster recovery strategies by deploying high-availability backup and replication workflows

Designed custom data center blueprints optimized to host mission-critical applications

Optimized network infrastructure solutions for unified voice/data. Career Note: Also worked as a Network Engineer for White Wings Consulting, Inc. from 2005 to 2007, as a Network Administrator at CGAtlantic, Inc. from 2004 to 2005, as a Freelance IT Network Engineer in 2004, and as a Junior Network Administrator for Micropower Computer Institute from 2003 to 2004.

Education and Training

Binghamton University, Binghamton, NY

Bachelor of Science in Computer Science

— Certifications —

Certified Information Security Manager (CISM)~Certified Information Systems Professional (CISSP) GIAC Defensible Security Architecture (GDSA)~AWS (Solutions Architect, Network & Security Specialty) Cisco (CCNP Security, CCNP Enterprise, CCNA)

)Microsoft Certified Cybersecurity Architect Expert~Microsoft Certified Systems Engineer (MCSE) Check Point Cyber Security Administrator (CCSA)~CompTIA (A+, Network+, Cloud+)

Contact this candidate