Chirag
Mumbai, India · Fractional CISO | VCISO | Cybersecurity Strategy | Board Advisor | Cloud Security | Compliance · ShieldX Cybersecurity Global LLP
8 followers
About
Chirag Panchal is a Fractional CISO and cybersecurity leader with 27+ years of experience helping SaaS, healthcare, and technology companies build practical security programs that enable business growth. He is experienced in designing security strategies, leading compliance initiatives (SOC 2, ISO 27001, HIPAA, GDPR), advising executive leadership, and preparing organizations for enterprise customer security reviews and investor due diligence. He is passionate about helping startups build scalable security programs without unnecessary complexity while balancing business objectives, risk, and growth.
Skills
- Security Strategy & Governance
- Risk Management & Compliance
- HIPAA
- HITRUST
- SOC 2
- ISO 27001
- NIST
- Cloud Security
- AWS
- Azure
40 skills in total
Experience
-
Founder & Fractional CISO
ShieldX Cybersecurity Global LLP
Oct 2025 — Present
Mumbai, India
-
AVP – Infrastructure, Information Security and Compliance
HiLabs India Pvt. Ltd.
Feb 2022 — Oct 2025
Pune, India
-
Sr. Manager – Information Security
DocASAP India Pvt. Ltd. (part of Optum/UHG group)
Aug 2020 — Feb 2022
Noida, India
7 experiences in total
Recent posts
Beyond CVSS: Rethinking Vulnerability Remediation in the Age of Artificial Intelligence
The paper introduces the Adaptive AI Risk Score (AARS™)—a conceptual framework that complements traditional vulnerability scoring by incorporating additional factors such as:
1. Business criticality
2. Internet exposure
3. Exploit availability
4. Threat intelligence
5. Compensating controls
6. AI weaponization potential
The objective is not to replace established standards such as CVSS, but to encourage a more contextual, risk-informed approach to vulnerability prioritization.
Artificial Intelligence has not made traditional vulnerability management obsolete—it has made it incomplete. The organizations that succeed will not necessarily be those that remediate every vulnerability the fastest, but those that can most accurately distinguish between technical severity and real business risk, and respond with speed, precision, and governance.
As product-led organizations accelerate innovation through cloud-native architectures, APIs, AI-enabled features, and continuous delivery, cybersecurity governance must evolve at the same pace. Vulnerability management should no longer be viewed solely as an operational activity—it is a strategic capability that supports resilience, customer trust, and business continuity.