Yogesh S. Thanvi

Cloud Security & DevSecOps | Securing Internet-Scale Infrastructure

For more than fifteen years I have helped keep internet-scale infrastructure reliable, secure, and continuously compliant, the kind of infrastructure that serves a substantial share of global web traffic and that millions of people and businesses depend on every day. My work spans DNS and global traffic management, Kubernetes and cloud-native platform security, and DevSecOps governance, and I codify that practice into peer-reviewed research and into the standards my profession is measured against.

My focus today: engineering trust into modern systems, so that compliance is a property systems prove continuously, not a periodic activity they survive.

About · Research · Speaking · Leadership & Service · Recognition · Writing · Contact

Selected Achievements

• Fifteen-plus years securing internet-scale cloud and edge infrastructure
• Author of eleven peer-reviewed papers (seven published in IEEE Xplore, four accepted), including sole-authored research
• Reviewer of more than thirty papers for international cybersecurity and AI conferences
• Named expert reviewer of the ISACA IT Audit Framework (ITAF), 5th Edition
• Member of ISACA’s IT Audit and Assurance Advisory Group and Emerging Trends Working Group
• Judge for the ISACA Foundation global scholarship program and ISACA Global Achievement Awards
• Invited speaker and panelist at ISACA and IEEE conferences
• ISACA Engage Forum Topic Leader, recognized publicly by ISACA

By the Numbers

• 15+ years in cloud security and internet infrastructure
• 11 peer-reviewed papers (7 published, 4 accepted)
• 30+ conference paper reviews completed
• 3 invited conference talks and panels
• CISA & CDPSE certified; 12+ years ISACA membership at Gold level

Available For

• Conference speaking and panels
• Research collaboration
• Peer review and technical program committees
• Cybersecurity and cloud-governance advisory
• Professional mentorship

Get in touch

Cloud security. DevSecOps governance. Continuous compliance. Cloud governance. Platform security. Zero Trust. DNS security. AI security governance.