Deeba Azmath

• Set and lead the enterprise strategy for Cyber Risk Intelligence & Advisory, providing oversight of globally distributed teams
responsible for identifying, prioritizing, and influencing the management of material cyber risks.
• Deliver integrated, intelligence-driven views of the firms cyber risk posture by synthesizing telemetry, risk findings, and
threat intelligence to inform C-suite and Board-level decision-making.
• Lead enterprise analysis of systemic control weaknesses and significant cyber events, ensuring clear articulation of root
causes, thematic risk exposure, and forward-looking implications.
• Serve as a trusted advisor to senior business and technology leadership, translating complex cyber threats and control gaps
into actionable business risk narratives and strategic options.
• Influence enterprise remediation priorities, control investments, and standards evolution through close partnership with
cross-product, technology, and control stakeholders.
• Drive a culture of proactive risk ownership across business and technology by embedding risk-based decision-making into
executive forums and operating rhythms.

• Conducted automated Web Application Penetration tests using AppScan Standard and conducted manual tests employing
tools like Burp Suite, adeptly bypassing proxies to assess vulnerabilities such as Cross Site Scripting, Cross-site Request
Forgery, and SQL Injection, among others.
• Employed reverse engineering techniques on iOS applications (both Native and Web Apps) using Cycript, and meticulously
assessed them for vulnerabilities utilizing tools like SSL Kill Switch, Burp Suite, and Device Log Viewer, ensuring
comprehensive security evaluations.
• Executed penetration tests on Android applications, utilizing tools such as Dalvik Debug Monitor Server (DDMS), Android
• Led research efforts into a variety of Dynamic Application Security Testing (DAST) tools, diligently documenting findings and
contributing valuable insights to the organizations knowledge base.