Looking for a job

Raghu Pal

@raghupal

Message

Cybersecurity GRC leader at Kyndryl who created an AI risk register agent recognized at the CIO AI Agent Launchpad.

India

Message

At Kyndryl Solutions Pvt. Ltd., I lead security, compliance, cloud governance and risk management programs. I direct risk assessments and third-party reviews, and automated compliance processes to increase efficiency and reporting accuracy by 40%.

I pioneered the Co-Pilot Risk Register Agent, which turns SME observations into structured, governance-ready risk intelligence and earned 2nd Position in the “Most Useful Agent” category at the CIO AI Agent Launchpad. Previously, at IBM India Pvt. Ltd., I delivered security strategy, technology risk and compliance advisory, including SOX 404 and SSAE 16 assessments.

Experience

Work history, roles, and key accomplishments

Current

Managing Consultant

Current

Kyndryl Solutions Pvt. Ltd.

Nov 2023 - Present (2 years 11 months)

Leads a 20-member cross-functional team delivering security, compliance, cloud governance, and risk management programs. Directs security and technology risk assessments, develops enterprise security frameworks, and automates compliance processes.

Security Governance Technology Risk ISO 27001 NIST 800 53 HIPAA SOX Third Party Risk Risk Assessment Compliance Automation Executive Reporting

Senior Advisory Consultant

IBM India Pvt. Ltd.

Jul 2013 - Nov 2023 (10 years 4 months)

Delivered end-to-end security strategy, technology risk management, and compliance advisory solutions. Led regulatory compliance initiatives including SOX 404 and SSAE 16 assessments, and supported GRC platform implementations.

Security Strategy Technology Risk Compliance SOX 404 SSAE16 GRC IBM Open Pages SAP Access Control

Technical Analyst

Wipro Technologies

Dec 2011 - Jul 2013 (1 year 7 months)

Performed ITGC, SAS 70, and SOX control testing, including design, implementation, and operating effectiveness assessments. Developed and reviewed custom control catalogs to improve alignment between control requirements and test procedures.

ITGC SAS70 Compliance SOX Control Testing Control Catalogs

Consultant

Deloitte Touche Tohmatsu

Jul 2011 - Dec 2011 (5 months)

Conducted technology and application risk assessments, application control testing, and general computer control evaluations. Assessed controls across Oracle and SQL databases, Windows and UNIX environments, security, change management, SAP, and disaster recovery.

Technology Risk Control Testing Oracle SQL Windows Unix SAP Disaster Recovery

Senior Executive

Fiserv India Pvt. Ltd.

Jun 2008 - Jul 2011 (3 years 1 month)

Performed ITGC, SAS 70, and SOX control testing and evaluated control design and operating effectiveness. Identified business and technology risks, evaluated mitigating controls, and supported security risk assessment and mitigation strategies.

ITGC SAS70 Compliance SOX Control Testing Risk Assessment Risk Mitigation