Praveen Kumar’s career has been defined by adaptability and a relentless pursuit of excellence. His formative years at RIMC, Dehradun led him to the National Defence Academy (NDA), setting the stage for a distinguished tenure in the Indian Navy. Over two decades, he built a strong foundation in Information Security, technology, operations, and crisis management—skills that would later prove invaluable in cybersecurity.

Kumar reflects, “Indian Navy instilled in me, a structured approach to problem-solving and crisis management—essential skills in the cybersecurity domain.”

During his service, cybersecurity was seamlessly integrated into broader operational mandates. Recognizing the growing importance of digital defense, he pursued a master’s degree in Computer Science (Information Security) from IIT Kanpur. This academic pursuit formalized his expertise, equipping him to secure critical infrastructure and combat emerging cyber threats.

Navigating the corporate transition: Challenges and learnings

After 21 years in the armed forces, Kumar faced a new battlefield—the corporate world. The transition was significant, requiring him to navigate a landscape where business priorities dictated security investments.

Some of the key adjustments included adapting to agile decision-making in contrast to the structured, hierarchical processes of the Navy, understanding business-driven risk management versus operational security mandates, and importantly, communicating cybersecurity priorities in business terms to leadership and stakeholders.

His first corporate role at a leading media company tested these adjustments, as he applied his military-honed expertise to safeguard enterprise infrastructure.

“Shifting from defense to corporate wasn’t just about leveraging my knowledge—it was about learning how to align security with business objectives. Unlike the Navy, where security is a given priority, in the corporate world, you have to educate, partner, influence and build a business case for cybersecurity investments.”

In his present role as CISO Nykaa, he heads cybersecurity for one of India’s leading e-commerce and beauty platforms. The shift required recalibrating strategies, but the fundamental mission remained the same: securing critical digital assets.

“Security is universal, whether protecting a nation or a business, it’s about identifying threats, mitigating risks, and ensuring resilience.”Praveen Kumar

Building a cybersecurity-first culture at Nykaa

At Nykaa, Kumar is spearheading a comprehensive, in-house cybersecurity strategy, reinforcing his belief that large enterprises must own their security infrastructure rather than rely on third-party vendors. He opines, “While outsourcing may work for smaller firms, enterprises with complex digital ecosystems require dedicated in-house cybersecurity teams.”

His approach goes beyond technical controls—he is ingraining security into the company’s core, ensuring both leadership and employees recognize its importance. His initiatives include the adoption of next-gen information security tools and the in-house development of Gen AI-based controls, positioning security as a fundamental business pillar. This forward-thinking strategy enables him to view security operations from a fresh perspective, moving beyond traditional methods.

Having observed the evolution of cybersecurity over the past decade, Kumar notes how the perception has shifted from a niche concern to a boardroom imperative.

He states, “Cybersecurity is no longer an afterthought—it is a business-critical discussion. Companies now understand that a security breach can have a direct impact on revenue, reputation, and customer trust.”

This shift, he believes, is a response to the digital economy’s exponential growth and the increasing sophistication of cyber threats.

Advice for cybersecurity aspirants: building a strong foundation

For professionals eyeing a career in cybersecurity, Kumar emphasizes the importance of foundational knowledge.

“Understanding the core principles of computing and data security is essential. Don’t rush into certifications or tools—build a strong conceptual base first.”Praveen Kumar

He views cybersecurity as a dynamic, intellectually stimulating field that offers continuous learning and problem-solving opportunities.

Reflecting on his own career, Kumar acknowledges that every path comes with pivotal decisions, some successful, others less so. He says, “You won’t always make the right call, but what matters is learning from every experience and continuously evolving.”

His journey from military service to corporate leadership underscores the value of adaptability and lifelong learning. By leveraging his diverse expertise, he continues to fortify India’s cybersecurity landscape, ensuring businesses remain resilient in an increasingly interconnected world.

(With inputs by Annanya Nayyar)