Priyanka Sunder

An enterprising IT GRC and Cybersecurity Professional offering 11+ years of strong experience in managing entire gamut of enterprise risk & compliance initiatives, IT GRC & information security service delivery by consulting & implementing best practices & frameworks for organizations across diverse industries Financial Institutes (FIs), Telecom, Digital, Retail, Consumer Product & IT Services. I was awarded recognition of Top 20 Indian Women Influencers in Security in 2020. I am creative, innovative, insightful, determined and passionate about my IKIGAI (my calling in life) to build and mentor the women cybersecurity workforce globally and secure IT and Cyber space.

I am highly skilled in reviewing & implementing the information security controls based on IS0 27001 framework, in review of IT governance control frameworks such as COBIT and ITIL, structuring & delivering value based services for clients across engagements, building innovative & aligned IT process control frameworks. I possess hands-on experience in regulations and other guidelines including:

- RBI: Information Security, Electronic Banking, Technology Risk Management and Cyber Frauds

- MAS TRM: Technology Risk Management (regulations of Singapore)

- ABS (Association of Banks in Singapore): OSPAR (Outsourced Service Provider Assessment Report)

- Australia Prudential Regulatory Authority (APRA) Standards like CPS 220, APS 610

- GSMA guidelines for Telco firms – Information Security Compliance Standard for eSIM providers for Apple watch, IoT devices

- Aadhar Regulations 2016 and Amendments

I serve as principal executive ‘point of contact’ for Information Security Assurance and Governance Risk Compliance at my earlier client firm and current company, engaged in ensuring appropriate IT GRC strategies are in place and are acted upon according to priorities. I have expertise in defining & implementing data governance frameworks, critical system assessment framework, asset valuation & quantitative information security risk assessment framework, security incident response framework, data leakage prevention control framework and preparing Information Security question-bank for information security training and awareness.

I am a Dynamic Change Driver valued for executing & managing best practices for above mentioned fields of expertise; managed broad range of corporate IT initiatives through planning, analysis, and implementation of solutions. I have international exposure across various countries such as India, UK, Singapore, USA, Europe, Australia, Japan, Malaysia and UAE.

I hold a Masters Degree in Information Management (specialization in Project Management) and Certificate of Advanced Studies in Information Security Management from School of Information Studies & School of Management, Syracuse University, New York, USA in 2005 and Bachelors Degree in Computer Engineering from Sardar Patel College of Engineering, Mumbai University, India in 2002. Additionally, I hold 15 professional certifications in various fields such as Information Security (ISO 20000), IT Audit (CISA) Cloud Computing, Cloud Security, Network, Privileged Identity Management and Web Application Security. I am serving as Co-Chair in Women in Cyber Security (W-CS), an initiative established by ISSA India and Chapter Lead of Mumbai Chapter and Web Talks track as well as Mentor at Women in Cyber Security and Privacy (WiCSP).