Sunil Varkey has been appointed as EVP & Chief Information Security Officer (CISO) at Hexaware Technologies.
In this role, he will spearhead the company’s global cybersecurity strategy, cyber resilience initiatives, risk management framework, security governance, compliance programs, and enterprise-wide security transformation efforts to support Hexaware’s growth and digital innovation objectives.
Prior to this, he served as Cyber Security Consultant/Advisor at TAHAKOM, where he collaborated closely with the CISO to strengthen cybersecurity posture, resilience, and strategic security capabilities.
Earlier, he was VP & Chief Technology Officer, EMEA & APJ at Forescout Technologies Inc., where he led IT/OT security strategy, customer advocacy, market positioning, strategic consulting, and cybersecurity transformation initiatives across multiple geographies.
Before that, he served as MD & Global Head of Cyber Security Assessments & Testing at HSBC, leading a global team of more than 300 professionals responsible for penetration testing, threat modelling, vulnerability management, digital footprint analysis, and third-party security assessments.
He also held the role of CTO & Security Strategist – Middle East, Africa & Eastern Europe at Symantec, driving cybersecurity strategy, threat intelligence programs, security consulting, and resilience initiatives for enterprise, government, and financial sector organizations.
Earlier, he spent nearly six years with Wipro Limited, serving as Global Chief Information Security Officer and Fellow, Distinguished Member of Technical Staff (DMTS). During this tenure, he led global enterprise information security for a 200,000-employee organization and was recognized among Wipro’s most distinguished technology leaders.
Prior to that, he served as Head – Information Security & Privacy at Idea Cellular Ltd, where he oversaw information security, privacy, risk management, business continuity, security operations, and governance programs for one of India’s largest telecom operators.
His earlier leadership experience includes key roles at Barclays, GE, GENPACT LLC, Genpact (Formerly Gecis – GE Capital International), Paramount Computer Systems – Saudi Arabia, and The Saudi British Bank, where he developed extensive expertise across security operations, incident response, risk management, security engineering, consulting, and enterprise cybersecurity leadership.
With more than three decades of experience spanning cybersecurity, IT risk, governance, security operations, cyber resilience, threat management, and digital transformation, he brings deep expertise in building secure, scalable, and future-ready security organizations.
