Governing Body Spotlight

Ashish (Ash) Shrestha is currently the Group CISO at Jaguar Land Rover. He holds a Master's degree in Network Computing from UCLan and has multiple industry publications with over 150 citations globally. He is a passionate advocate for cybersecurity, regularly speaking at global events and serving as a trusted advisor to various organisations. Ash is recently confirmed as one of the finalists for EU CISO of the Year Award 2024

Ash is deeply committed to mentoring young professionals in the cybersecurity field, helping to shape the next generation of leaders. Outside of work, he enjoys traveling with his family, working out, and engaging in charitable activities. He is proud of his Nepalese heritage and is dedicated to giving back to the community. Ash has established himself as a trusted advisor for the Cyber Crime Bureaus and charities working to protect our future generation from online crimes, cyber-bullying, and harassment

Learn more about the UK & Ireland CISO community here.
 

Give us a brief overview of the path that led to your current role.

With over two decades of experience in leading transformative information security initiatives across various industries, I am a strong advocate of radical and innovative approach and commitment to delivering business value and establishing cyber as brand USP. Before Jaguar Land Rover, I was the CISO at Shell Energy, where I pioneered a value-by-design approach. Prior to that, I have led a radical transformation of Information security strategy in Global Medial and Advertising world, Telco, and I have led and managed Information security strategy and transformation in B2C and B2B businesses, including protecting critical national infrastructure.
 

What is one of your guiding leadership principles?

You must go after the things you want, but remain humble in this journey. Be prepared to unlearn and relearn.
 

What is the greatest challenge security leaders face today, and how are you addressing it?

The challenge is evolving Infosec and Cyber from just being seen as a legal and compliance burden. 

I am a dreamer, not an idle dreamer, but my creative intuition allows me to visualise the future, and I am also an explorer when it comes to my strong archetypes. Using my inherent characteristics, I am striving to achieve highest possible aspiration in bringing infosec and cyber closer to heart by developing a shared set of meanings that resonates both rationally and emotionally with customers, my people, and connectivity to our purpose and mission to thrive with confidence and help positively influence the success of the brand.
 

What is the key to success for someone just starting out as a CISO?

Focus on partnership and developing a common language. Propagating security as a black art harms the overall cause. I always start with simple conversation to unlearn and relearn from the knowledge close to the source – Even now, I would like to recognise and capture business risks and their impacts from those who know best.

• What could go wrong and cause trouble for your LOB?
• What would the impact be on your business?
   

How do you measure success as a leader?

Value Creation Metrics
 

What is the value of being a member of the Evanta community?

Being part of the Evanta community gives a bidirectional platform to share your thought leadership, but also learn, unlearn and relearn from the community and to connect, learn, and contribute alongside some of the brightest minds in the industry.
 

Evanta Governing Body members share their insights and leadership perspectives to shape the agendas and topics that address the top priorities impacting business leaders today.