Open to opportunities

Akansha Pandey

@akanshapandey

Message

Lead Security Engineer with expertise in risk management and compliance.

India

Message

What I'm looking for

I am looking for a role that challenges me in cybersecurity, offers growth opportunities, and values a proactive security culture.

I am a dedicated Lead Security Engineer with extensive experience in establishing governance, risk, and compliance functions within the eCommerce sector. Currently, I lead security initiatives at Flipkart Health+, where I implement risk management frameworks and conduct ISO 27001 audits. My role involves identifying security gaps and developing comprehensive mitigation plans to ensure robust information security.

Previously, I served as an Assistant Manager at Mashreq Bank, where I led the implementation of information risk management frameworks and streamlined third-party risk management processes. My journey in cybersecurity began at PricewaterhouseCoopers and EY, where I honed my skills in vendor risk management and compliance audits. I am passionate about enhancing security protocols and fostering a culture of security awareness within organizations.

Experience

Work history, roles, and key accomplishments

Current

Lead Security Engineer

Current

Flipkart Internet Private Limited

Sep 2021 - Present (3 years 8 months)

Leading the Governance, Risk, and Compliance function for Flipkart Health+, conducting assessments, and implementing security frameworks. Responsible for ISO 27001 audits and third-party risk management, while identifying security gaps and developing mitigation plans.

Governance Risk Management Compliance ISO 27001 Third Party Risk Management Information Security Audit Management Security Frameworks Risk Assessment

Assistant Manager

Mashreq Bank

Sep 2020 - Sep 2021 (1 year)

Implemented Information Risk Management frameworks and third-party risk management for the bank. Conducted internal and regulatory assessments while identifying security gaps and developing mitigation strategies.

Third Party Risk Management Regulatory Compliance Risk Assessment Compliance Monitoring

Cyber Security Consultant

PricewaterhouseCoopers Pvt. Ltd.

May 2018 - Sep 2020 (2 years 4 months)

Led third-party risk assessment projects and internal audits for cloud providers. Developed policies for Data Loss Prevention and managed information security training programs while ensuring compliance with security standards.

Third Party Risk Management Internal Audit Data Loss Prevention Compliance Monitoring Security Policies Risk Assessment Security Training Programs

Cyber Security Consultant

EY (Ernst & Young)

Sep 2015 - May 2018 (2 years 8 months)

Automated vendor risk management processes and conducted internal IT audits. Engaged in GDPR gap analysis and collaborated on data classification projects while implementing security policies in accordance with ISO 27001 standards.

Vendor Risk Management IT Audit GDPR Compliance Data Classification Security Policies ISO 27001 Risk Assessment

Intern

MphasiS Limited

May 2014 - Aug 2014 (3 months)

Conducted quantitative analysis on employee behavior towards information security and developed a framework for selecting security champions within the organization.