Looking for a job

Shweta Pardeshi

@shwetapardeshi

IT Internal Auditor at Goldman Sachs assessing AI-driven financial models and controls for regulatory capital reporting.

United States

Message

At Goldman Sachs, I execute IT audit testing of AI-driven financial and regulatory capital statement reconciliation models, evaluating controls for change management, business resiliency, data privacy, and continuous monitoring. I also assess technology and process controls supporting financial reporting and regulatory capital calculations.

Previously, I led security reviews at Deloitte and cybersecurity risk advisory work at PwC, including third-party risk assessments, application security assessments, and control evaluations. At JM Family Enterprises, I worked on cyber risk quantification for an Azure network migration and assisted with AI security governance.

Experience

Work history, roles, and key accomplishments

Current

IT Internal Auditor

Current

Goldman Sachs

May 2026 - Present (5 months)

Executed audit testing of AI-driven financial and regulatory capital statement reconciliation models, and assessed technology and process controls supporting financial reporting and regulatory capital calculations. Performed IT General Controls testing for SOX compliance and evaluated data governance controls.

AI Audit Regulatory Capital SOX Compliance IT General Controls Data Governance Data Privacy Risk Management

Business Information Security Intern

JM Family Enterprises

May 2025 - Aug 2025 (3 months)

Led Cyber Risk Quantification for Azure public-to-private network migration and developed business case for security and cost benefits. Assisted in developing AI security governance checklist and managed Third-Party Risk Assessment metrics.

Cyber Risk Quantification Azure Application Security Third Party Risk Management Governance Compliance Metrics Reporting

Senior Cybersecurity Associate

PricewaterhouseCoopers

Mar 2023 - Jul 2024 (1 year 4 months)

Spearheaded control assessments for a major pharmaceutical client and developed an exception handling framework for a global bank. Led third-party information security IT audits and created security checklists for IT vendors.

SOC2 Risk Assessment Exception Management Third Party Audits Infosec Regulatory Compliance

Assistant Manager, Risk Advisory

Deloitte

Jun 2022 - Mar 2023 (9 months)

Led security reviews of websites and mobile applications, performing over 200 assessments for multiple business units. Tracked and reported vulnerabilities using Qualys scanning tool and managed DNS record requests.

Web Application Security Mobile Security OWASP Qualys Vulnerability Management DNS management

Cybersecurity Consultant

Deloitte

Jun 2019 - May 2022 (2 years 11 months)

Reviewed security environments of third-party vendors for a pharmaceutical client, ensuring compliance with NIST, ISO 27001, HIPAA, GDPR, and SOX. Conducted over 150 third-party risk assessments and evaluated control requirements.

Third Party Risk Assessments NIST ISO 27001 HIPAA GDPR SOX Vendor Management Risk Management