Shridhar Bhat

Designed and built an AI risk-monitoring agent with a multi-layer architecture that ingests delivery signals, computes risk and reasoning, and supports escalation with an approval gate. Created an interactive dashboard for risk posture, scoring rationale, and pending escalations. Built a cybersecurity M&A due-diligence agent that converts a structured risk workbook into an executive dashboard and supporting pitch materials.

Led cybersecurity remediation for regulated EDMS/eQMS systems, including designing high-availability infrastructure and implementing SSO while retiring end-of-life components. Managed biometric authentication and access control integration to ensure identity verification and training compliance for regulated activities. Directed major EDMS and eQMS upgrades with database and server migrations, disaster recovery testing, cutover execution, and month-end ETC/EAC reporting while owning 21 CFR Part 11/GAMP 5 validation deliverables.

Directed an enterprise cybersecurity risk remediation program, partnering with security leadership on red-team and penetration-test remediation. Aligned remediation priorities to NIST CSF and ISO 27001 functions, tracked risks and issues, and reported risk posture directly to the CISO. Delivered strategic risk-reduction initiatives including SAP S/4 PII de-identification, and led an AWS data lake plus a SaaS implementation to standardize global operations.

Built red/purple team and penetration-test remediation governance, including risk intake and remediation tracking, with mitigation status reporting to the CISO. Initiated privileged access management with architecture and stage-gate business-case materials, then coordinated an enterprise authentication migration. Managed secure change efforts across VPN client strategy and communications, and delivered compliance-focused PII masking and enterprise data archiving planning while running large multi-vendor portfolios and enterprise migrations.

Led cybersecurity initiatives including APT remediation, system hardening, password rotation, CyberArk password vaulting, and application whitelisting. Established vulnerability management and compliance reporting aligned to NIST CSF and ISO 27001, supporting SOX and PCI compliance needs. Managed business continuity and disaster recovery programs and led infrastructure transformation with SLA governance across multiple regions, including technology integration work for M&A statements of work.

Deployed McAfee ePolicy Orchestrator (ePO) for endpoint security management and led root cause analysis and service improvement planning for critical and high-severity incidents. Supported incident response through the Critical Response Team and coordinated IT infrastructure transition work across regions. Mentored a large team and contributed to end-to-end operations for the assigned security and infrastructure scope.

Held systems engineer roles as part of early-career work; specific responsibilities and outcomes are not detailed in the CV.

Held systems engineer roles as part of early-career work; specific responsibilities and outcomes are not detailed in the CV.

Held systems engineer roles as part of early-career work; specific responsibilities and outcomes are not detailed in the CV.

Held systems engineer roles as part of early-career work; specific responsibilities and outcomes are not detailed in the CV.

Designed an AI agent that consolidates a structured cybersecurity due-diligence workbook into a single executive dashboard. The dashboard supports CISO/CIO consumption by organizing risk registers, evidence tracking, integration/divestiture plans, and decision logs into one view. Produced executive and technical pitch materials based on the resulting dashboard outputs.

Built an AI risk-monitoring agent with a layered architecture for ingesting signals, scoring and reasoning about risk, and supporting escalation decisions. Integrated LLM sentiment analysis from delivery status updates to surface early risk warnings. Implemented a human approval gate to ensure accountable sign-off before any automated escalation action.