Syed Ishaq B.
Hands-on Security Leader | Secure AI Transformation Evangelist
Professional Summary
A passionate security leader with 14 years of Infosec experience integrating DevSecOps, Secure SDLC, and platform security into product-driven orgs. Built and scaled 3 large-scale sustainable security functions from ground up, covering AppSec, CloudSec, SOC, GRC, Datacenters and Corporate IT. Combines deep technical fluency in cloud-native architectures, offensive security, and AI risk management with a business-first mindset treating security as an innovation enabler v/s a gatekeeper. Trusted advisor to the leadership and boards on strategic risk, posture, and regulatory compliance across multi-country operations.
Work Experience
HelloFresh
World's leading meal-kit company, 8 brands, 10 million+ customers, 18 geographies.
6 yrs 2 mos
Director / Head of Information Security
Berlin, Germany · Hybrid
- Leading 7 globally distributed security teams (37 engineers and analysts) with accountability for security vision, strategic roadmap, and compliance posture (PCI-DSS, NIST, NIS2, ISO 27001, EU AI Act) across a multi-country e-commerce platform.
- Driving platform-first security integration across the product lifecycle: architecting DevSecOps and Secure SDLC frameworks enabling rapid, secure feature velocity through automation and scalable guardrails.
- Championing secure AI transformation: designing and securing AI capabilities across the business, addressing model risks, data protection, and responsible AI governance aligned with EU AI Act.
- Serving as trusted security advisor to CTO, C-suite, and Board: delivering data-driven security metrics, strategic risk assessments, and actionable recommendations on security investments and resilience.
- Establishing metrics-driven governance with standardized KPIs and board-level reporting; cultivating high-performing team culture emphasizing ownership, collaboration, and continuous improvement.
Cyber Security Tribe Lead
Berlin, Germany · Hybrid
- Transformed security from a contractor-heavy squad into a sustainable Tribe with 5 specialized squads (Blue Team, Cloud Security, AppSec, GRC, IT Security), establishing clear ownership, mandate, and career growth paths while eliminating reliance on 3rd-party consultancy firms.
- Pioneered product-driven security management: introduced dedicated Product Ownership function responsible for tribe vision, strategic roadmap, KPI trees, and security posture analysis across all HelloFresh Group brands.
- Drove high-impact capability build-outs: stood up 24/7 SOC with detection engineering and threat hunting, launched bug bounty and security champions programs, and extended security coverage to production facilities and distribution centers.
Cyber Security Squad Lead
Berlin, Germany · On-site
- Built HelloFresh's first AppSec program from scratch: CI/CD pipeline hardening with SAST/DAST/IAST integration, launched bug bounty program via Intigriti, established security champions network, and introduced threat modeling into the SDLC.
- Secured multi-cloud infrastructure across AWS and Kubernetes: implemented cloud IAM governance, secrets management (Vault), perimeter hardening via CloudFlare (bot protection, rate limiting, API shield), and automated corrective actions against misconfigs.
- Established vulnerability management program: pentesting cadence, supply chain/CVE scanning, and coordinated disclosure workflows; deployed initial SIEM capability with SumoLogic for continuous monitoring.
Reference: Andrew Wurster (Manager) · andrew@awurster.com · LinkedIn