Create your free profile

About

CISA-certified cybersecurity, GRC and IT risk leader with 15+ years of experience across consulting, Big Four and global delivery environments. Experience includes IAM governance, joiner-mover-leaver (JML) workflow governance, access certifications, privileged access management (PAM) control assurance, SOX ITGC and enterprise security governance. Delivered a reported 40% improvement in compliance efficiency through an IAM governance model on Clear Skye, reduced ITGC audit cycle time by 30%, and achieved zero critical audit findings across two consecutive audit cycles. Experienced in aligning security controls with ISO 27001, NIST, GDPR and HIPAA requirements, leading teams and coordinating with risk, audit and senior business stakeholders.

Experience7

  1. Deputy Manager, Cybersecurity & GRC

    Dec 2023 — Present

    Deloitte

    Led identity-domain and SOX ITGC compliance activities contributing to zero critical audit findings over two consecutive audit cycles. Improved compliance efficiency by 40% via deployment of an IAM governance model on Clear Skye supporting JML and access certifications. Strengthened PAM control assurance and automated monitoring in Splunk. Reduced ITGC audit cycle time by 30% through audit-ready control-testing playbooks and evidence-mapping libraries. Designed ISO 27001- and NIST-aligned security governance and partnered with senior stakeholders on risk and remediation governance.

  2. Senior Associate, IT Audit

    Mar 2023 — Jul 2023

    KPMG

    Reduced audit cycle time by 20% through Risk Control Matrices, test scripts, and streamlined evidence mapping for APAC clients. Executed SOX ITGC audits and application control reviews, including walkthroughs, deficiency reporting, remediation testing, and third-party IT risk assessment.

  3. Assistant Manager, IT Audit & GRC

    Feb 2022 — Mar 2023

    Wipro

    Led a nine-member ITGC compliance team and improved audit SLA compliance by 25% with clear control ownership and escalation paths. Established a centralized risk register and developed SOX SOPs and audit playbooks covering identity, change, and backup/recovery controls. Conducted root-cause analysis to address repeat findings.

  4. Technical Delivery Specialist, Cybersecurity & Compliance

    Feb 2015 — Jan 2022

    IBM India Pvt Ltd

    Sustained ISO 27001 ISMS certification for three consecutive years through surveillance audits and control maturity improvements. Reduced open vulnerabilities by 35% via remediation governance and SLA tracking. Led GDPR and HIPAA compliance activities including privacy impact analysis and regulatory reporting. Built SOC and IT compliance dashboards and standardized ITGC and security-policy adherence across centers.

  5. Senior IT Analyst, Internal Audit

    Mar 2011 — Jan 2014

    IBM

    Performed risk-based internal audits and control assessments, managed audit reporting, exception tracking, and external auditor coordination.

  6. IT Security Analyst

    Aug 2010 — Mar 2011

    Accenture

    Executed SOX control testing and ITGC assessments for internal accounts and enterprise systems.

  7. Senior Process Executive

    Aug 2007 — Nov 2009

    Infosys Ltd

    Supported access governance and backup-compliance operations for managed IT environments.