Security mindset: heading the Cyber Defense Center

Welcome to Spotlight, Anveshi Sauraj. How long have you been at G+D, and what is it you do?

I have been with G+D since October 2021 as the Head of the Cyber Defense Center. Now, as the Global Head of the Cyber Defense Center, based in Gurugram in India, I have expanded my team across different regions of the world.

G+D is a SecurityTech company providing solutions to our partners worldwide, and my job is to ensure digital security within the organisation. We make sure that our infrastructure, assets, data, and information are completely safe and secure.

Can you tell us a bit about the Cyber Defense Center?

We are part of corporate security. One way to think of us is as the digital control room of G+D. We are proactive in terms of identifying threats and stopping them before they actually hit us.

We’re a centralised, specialised unit that caters to all G+D’s business segments: Currency Technology, Financial Platforms, and Digital Security. Within our department, we have many verticals. Security Operations Center handles the incident response, email forensics, account compromise investigations, cyber forensics, and cloud security monitoring. Another vertical is Vulnerability Management, which finds vulnerabilities in our security systems and has them fixed before attackers catch them. Security Consultancy is where we do PoCs, tool testings, and projects for anything that can benefit or otherwise help secure our environment. 

In a world where cyber threats are always evolving, the Cyber Defense Center ensures that our security strategy remains ahead of the curve by leveraging cutting-edge AI, analytics, and skilled personnel.

The cybersecurity team is very international, in which countries do your colleagues work?

Our team is currently set up with colleagues in India, Spain, Mexico and soon in China.

What does your day look like, given that you’re running a team across time zones and nations?

My team’s normal day is dynamic and fast-paced, and requires constant multitasking to manage a wide range of responsibilities. We started round-the-clock operations this year, as our leadership believed in us. Our plan is to grow to Mexico, and once we have resources there, we’ll shift some of the coverage across the globe. 

Managing time differences can be a challenge for some people. But really, this has not been something new to me. It was never a dealbreaker. It is something you adapt to. 

I structure my day around the critical time zone. We make sure that we have overlaps between all our teams. We also try to structure a block of at least two to three hours, where I can have our colleagues from all the regions in one place, where we can talk about the issues they are facing or any critical incident that they might have encountered. 

The human aspect is coordination and communication. Then there is technology, of course: we rely heavily on collaboration tools. There must be absolutely zero misses in our coverage. Keeping the organisation secure and managing a global team of experts requires constant vigilance, coordination, and a forward-thinking approach. Every day is different, and that’s what I love about it.

What brought you to cybersecurity?

I think my preparation for this role and, honestly, for cybersecurity as a whole, is partly because of my academic background. I studied electronics and communication, which sort of prepared me for network and information security.

I was drawn to cybersecurity because it sits at the intersection of technology, problem-solving, and protecting critical assets, all of which are areas I am deeply passionate about. I was fascinated by the complexity and evolving nature of cybersecurity: the need to stay ahead of emerging threats and the opportunity to work with cutting-edge technologies made this field both exciting and intellectually stimulating. The dynamic nature of the field, where the threat landscape is constantly evolving, presents an opportunity for continuous learning and adaptation, which keeps the work exciting and rewarding. I was also motivated by the opportunity to make a tangible impact.

Let’s talk about you a little. Where are you from?

I’m originally from India, and I earned a bachelor’s of technology in electronics and communication. My academic background focused on network communication and information security, which laid the foundation for my career in the security domain.

In addition to my formal education, I’ve continued to enhance my skills through various professional certifications and courses. This is crucial in staying up to date with the latest industry trends and best practices. I attend conferences and webinars to stay updated with what’s going on in the industry. 

Throughout my career, I’ve had the opportunity to work in various roles that have expanded my expertise in cybersecurity, and I’ve had the privilege of collaborating with diverse teams across different regions. This experience has been instrumental in shaping my approach to leadership and problem-solving.

I have always been driven by curiosity. My passion is for solving complex problems, always striving to turn challenges into opportunities for innovation.

You’re providing security to a group of people who are security experts. Is there an element of education in what you do?

Working in cybersecurity is challenging and multifaceted. You’re constantly addressing vulnerabilities, incidents, and structural flaws in architecture while collaborating with people who have their own perspectives and priorities. Human nature often leads individuals to justify doing things their own way, even if adjustments are necessary for optimal security.

As an example, take our relationship with developers. When tasked with building a product or web application, their mindset is to deliver it, no matter what. That’s their goal. However, it’s not just about delivery for us. It is about ensuring the final product is secure. This is where collaboration becomes essential. We must help them understand the importance of secure coding practices, while reassuring them that we are not obstructing innovation. Instead, we’re advocating for a balance – being securely innovative is the right way forward.

When people ask me about digital transformation, I always emphasise its value. But I also remind them that security transformation must progress at the same pace. Without it, the digital journey is incomplete.

Has the reaction always been positive?

I have had the privilege of working at G+D, where a forward-thinking mindset is deeply ingrained. Our leaders are incredibly supportive of the initiatives we undertake, and I have encountered minimal resistance along the way. [Smiles] Perhaps my negotiation skills play a role in that! Overall, it has been a very positive and rewarding experience.

Cybersecurity is a dynamic field. To meet that challenge, do you stay on top of developments yourself, or do you depend on other people?

Let me share an interesting story from my career journey. One of my managers gave me valuable advice when I was transitioning from being an individual contributor to a leadership role. He pointed out that I might feel tempted to handle tasks myself, thinking I could do them better and faster because of my experience. However, leadership is about trusting your team. You can’t do everything on your own, and empowering your team is key to achieving success together.

That being said, I do trust my team. I let them do their jobs. But at the same time, I make sure that I’m also aware of the landscape of evolving threats, major threat actors, and the industries impacted.

How did you make your way to G+D?

Sometimes the best opportunities come from unexpected places or moments. I was made aware of this opportunity through a consultant who viewed my LinkedIn profile. After learning more about the company’s vision and culture, I realised it was an ideal match for both my professional aspirations and my personal values.

What are you planning to do in the new year?

I want to focus more on artificial intelligence and how we can make better use of it in the Cyber Defense Center. Not just from a technological perspective, but also to automate things. And speaking from the perspective of a manager: To what extent can the AI strategy be integrated or implemented in my department so that it is in line with the corporate vision?

It would also be helpful to speak another language. I'm fine with English so far, but for more intensive collaboration in my intercultural teams, I'd like to know Spanish or German. It's simply much more personal in conversation and gives my team members a better feeling. It's not just the professional contact with my colleagues that is important to me. After all, an emotional bond is not just about work. It should also be fun and together we are more innovative. 

I also want to tell people a lot more about the Cyber Defense Center. So that everyone really knows what we do. That way, I could ensure greater visibility and efficiency right from the start.

Looking back over the last three years, I am proud of what we have achieved as a team and believe that continuous learning and adaptability are key to staying ahead. 

Clearly your team is important to you. What do you look for in a résumé when it crosses your desk?

[Laughs] Not everybody is an expert at writing résumés. They know a lot but they haven’t found a way to mention it. 

What I do in terms of the screening is to check the strong educational background in security, computer science, information technology, or related disciplines.

In the interview process I check them on their practical experience, which is very crucial. We ask about real-time use cases. For example, this is the server and I’m trying to do a brute force attack on it. How would you combat it?

I feel that you can teach people technology, but you cannot teach the security mindset. They have to have that, and also the life experiences that enable them to demonstrate problem-solving abilities, resilience, adaptability, and flexibility.

Even if they don’t know all the pieces to the solution, if I see that the candidate is logical and is able to answer even under the pressure of not knowing the entire solution, I think that’s a good choice for me in cybersecurity.

What do you like best about your job?

What I enjoy the most about my role is obviously the constant challenge. The knowledge that my work directly contributes to safeguarding the organisation and its stakeholders keeps me motivated. I’m driven by that sense of purpose and responsibility that comes with the role. Additionally, collaborating with a talented team and working on cutting-edge technologies adds to the excitement and satisfaction of the job. 

Every day brings something new: new security threats, new technological advancements, increased attack surface and more sophisticated attacks. Think about a car that is programmed to stop at traffic lights: what if somebody injects a malware in that programming code? The car won’t stop. Challenges like that keep me on my toes. This dynamic, intellectually stimulating environment keeps me going.

I think the other reason is my team. Their energy, their collaboration fuels my passion for the job. The continuous support, respect, and open conversations I have with my leadership also make me feel everything is seamless, and keeps me motivated to contribute even more.

For me, coming to office doesn’t feel like work – it’s more like being part of something I truly enjoy. Which is rare!

You’re a female leader in a tech sphere. Have you ever felt that there were obstacles? Do you ever feel a need to be a role model?

In my opinion, it’s not about the gender balance. It’s more about unlocking the full potential of the industry. 

Being a female leader in the industry, I can’t say that it has never been challenging. But I do think it has been rewarding at the same time. I’ve been fortunate enough to work in environments that value diversity and are committed to fostering inclusivity.

As a woman, you will face biases. You have to make sure that your voice is heard in a predominantly male space. And it can sometimes be very difficult to navigate perceptions and expectations because they are different for men and women.

But what I trained my brain on is that I always see these challenges as an opportunity to inspire and innovate. Not just for me, but to create a path for the next generation of women so that they know to upskill themselves, to make themselves so knowledgeable that they will be heard and valued. Then you can make a change. That has been my mantra so far.