Manager, Cyber & Digital Risk · Emirates NBD

Vinesh Redkar

Cybersecurity Lead – Cyber and Digital Risk Manager / Security Architect / DevSecOps / Security Consultant / Application Security

CISSP CISM AWS Security – Specialty AWS Cloud Practitioner
Cobalt Core Pentester Application & Mobile Security AWS Cloud Security DevSecOps

Dubai-based cybersecurity leader with over 14 years of experience specializing in cyber risk assessment, security architecture, and DevSecOps within the banking and financial services sector. Currently serving as Manager, Cyber and Digital Risk, at Emirates NBD, leading end-to-end security evaluations for digital products while ensuring alignment with regulatory requirements, industry standards, and internal security policies.

Contact Me View Experience
14+Years in cybersecurity
6Professional certifications, including CISSP & CISM
10Security professionals led in consulting
UAE + IndiaBanking & consulting experience

01 · Profile

Profile Summary

Accomplished IT security professional with comprehensive experience in identifying vulnerabilities, proposing effective security solutions, and improving the security posture of applications and enterprise platforms while leading and managing diverse teams. Passionate about helping organizations achieve strong quality and information security outcomes by managing cyber risk, supporting business objectives, and enabling secure technology transformation.

Cyber & Digital Risk

Independent risk assessments and go-live approvals for new banking technologies and third-party integrations, aligned with enterprise risk appetite.

Security Architecture

Secure design and threat modeling from the earliest stages, reducing Critical, High, and Medium risks before they reach production.

DevSecOps & AppSec

SAST, DAST, and third-party scanning built into delivery pipelines, plus hands-on testing of web, mobile, API, and thick-client applications.

Application & Network Security (VAPT)

Vulnerability assessment and penetration testing across web, mobile, API, thick-client, and network infrastructure, including red teaming, source code review, and router, switch, and firewall configuration reviews, with clear PoC-backed findings and remediation guidance.

02 · Career

Career Experience

From penetration testing and consulting to security architecture and cyber risk leadership in banking.

Emirates NBD

Dubai, UAE · 2018 – Present

Manager, Cyber and Digital Risk

Emirates NBD · Dubai, UAE
Jan 2025 – Present
  • Lead cyber risk assessments for new banking technologies and third-party integrations, supporting go-live approvals aligned with enterprise risk appetite.
  • Provide independent oversight and challenge to first-line risk-taking activities in line with the Risk Management Framework.
  • Identify, assess, and monitor enterprise risks while ensuring adherence to policies, regulatory requirements, and risk appetite.
  • Conduct independent risk assessments and gap analyses across operational, financial, compliance, and strategic areas.
  • Collaborate with business and first-line teams to improve risk awareness and strengthen controls and remediation actions.

Senior Security Architect

Emirates NBD · Dubai, UAE
Sep 2021 – Jan 2025
  • Designed and implemented security strategies to protect enterprise applications, infrastructure, and sensitive information from evolving threats.
  • Conducted in-depth threat modeling that significantly reduced potential Critical, High, and Medium risks.
  • Performed threat modeling during design stages to reduce later remediation costs and improve secure design outcomes.
More highlights
  • Presented robust solutions to both technical and non-technical stakeholders while evaluating complex business and technical requirements.
  • Improved SSDLC and DevSecOps practices across all development phases and guided developers on secure coding and security components.
  • Evaluated security requirements during RFP stages and contributed to organization-wide security strategy development.

DevSecOps / Security Architect

Emirates NBD · Dubai, UAE
Jun 2018 – Sep 2021
  • Implemented SSDLC and DevSecOps best practices while delivering security architecture guidelines and security requirements to diverse teams.
  • Performed static and dynamic reviews of web, mobile, API, and thick-client applications using automated and manual techniques.
  • Integrated SAST, DAST, and third-party scanning into delivery pipelines to reduce release effort and improve security coverage.
More highlights
  • Conducted source code review, threat modeling, design review, penetration testing, and cloud infrastructure security review.
  • Created reusable technical reporting templates and supported vendor assessment and remediation prioritization.

Network Intelligence

Mumbai, India → Dubai, UAE · 2012 – 2018

Senior Cyber Security Consultant

Network Intelligence · Dubai, UAE
May 2017 – Jun 2018
  • Delivered major banking security projects involving red teaming, infrastructure security reviews, and application security assessments.
  • Managed a team of 10 security professionals performing security reviews across multiple client engagements.
  • Produced technical and executive-level reports with observations, proofs of concept, impact analysis, and recommendations.
  • Guided clients on compensating controls where immediate remediation was not feasible before production go-live.

Security Consultant

Network Intelligence · Dubai, UAE
Apr 2015 – Apr 2017
  • Reviewed source code and conducted security assessments of web, mobile, and infrastructure environments.
  • Delivered detailed testing reports and coordinated with development teams on remediation throughout engagements.
  • Supported on-site projects across the Middle East to assess application and infrastructure security.

Information Security Analyst

Network Intelligence · Mumbai, India
May 2012 – Apr 2015
  • Performed vulnerability assessments and penetration testing for web, mobile, thick-client, and source code review engagements.
  • Managed product-related queries for Checkmarx and GFI LanGuard.
  • Evaluated security configurations of routers, switches, and firewalls to strengthen clients' security posture.

03 · Expertise

Areas of Expertise

Offensive & Application Security

Vulnerability Assessment Penetration Testing Web / Mobile / API Security OWASP / WASC Source Code Review

Architecture & Cloud

Security Architecture Threat Modeling Cloud Security Infrastructure Security Information & Application Security

Risk Management & Governance

Cyber Risk Assessment Enterprise Risk Management Risk Management Framework Risk Appetite Alignment Second-Line Oversight & Challenge Third-Party / Vendor Risk Technology & Go-Live Risk Approvals Risk Identification & Monitoring Gap Analysis Control Assessment & Remediation Regulatory Compliance Risk Mitigation Security Policies & Procedures SSDLC & DevSecOps

Leadership

Team Development & Leadership Customer Engagement Management Problem Solving & Decision Making Project & Resource Management

04 · Credentials

Certifications

Select a card to verify the credential.

Flagship credential
CISSPVerify ↗
Certified Information Systems Security Professional
ISC2
CISMVerify ↗
Certified Information Security Manager
ISACA
AWS-SCSVerify ↗
AWS Certified Security – Specialty
Amazon Web Services
AWS-CCPVerify ↗
AWS Certified Cloud Practitioner
Amazon Web Services
SASTLearn more ↗
Checkmarx Certified (SAST Tool)
Checkmarx
CISCLearn more ↗
Certified Information Security Consultant
Institute of Information Security

05 · Recognition

Awards & Recognition

Awards

  • GEM (Going the Extra Mile) Award – Risk Team, 2026
  • Annual GEM Sapphire Individual Award – Emirates NBD, 2020
  • Best Agile Supporter Team Award – Emirates NBD
  • Best Collaboration Team Award – Emirates NBD
  • Employee of the Quarter – Network Intelligence
  • Long Standing Award – Network Intelligence
  • Certificate of Excellence – Network Intelligence

Bug Bounty & Industry Recognition

  • Recognized in various bug bounty programs.
  • Acknowledged by Oracle Critical Advisory, Microsoft DotNetNuke, and Google.
  • Rewarded by Yahoo, PayPal, AT&T, and Nokia.

Education

Bachelor of Engineering in Information Technology

University of Mumbai, India · 2010

Languages

Marathi · Native Hindi · Fluent English · Fluent

06 · Contact

Let's Connect

Open to conversations on cyber risk, security architecture, DevSecOps, and speaking or advisory opportunities.

Based inDubai, United Arab Emirates (GST, UTC+4)

Messages are delivered privately — no email address or phone number is published on this site.