Chhavi Deswal

Experience

• 

  Tech Mahindra

  Mar 2010 - Aug 2011

  Technical Associate

  Worked as the Quality and Assurance Analyst and was involved in gathering requirements from the client, writing Test Plans and Unit Test Cases using HP Quality Centre, followed by Black Box Testing.

• 

  KPMG

  Jun 2013 - Sept 2017

  I have worked with KPMG India since June 2013 as Consultant in IT Advisory. During my tenure at KPMG, I was engaged in IT security audits, ITGC, IT Advisory engagements, and process attestation engagements (SOC1 and SOC2). Further, I have been involved in client interactions for understanding the business requirements and suggesting improvement areas.My experience has primarily been in executing engagements in the business process outsourcing sectors, electronics industry, tourism and travel industry, financial services and manufacturing industries. Show less I was responsible for carrying out SOX engagement for one of the leading Multinational Electronic Companies.I was responsible for carrying out ISAE 3402 attestation for one of the leading BPOs providing customer support & outsourcing services. In addition, I worked on testing controls related to Logistics, Training, Hiring, Information Technology, and HR tracks from ISAE 3402 Type II Report perspective for all China centres of the BPO Company. For this engagement, she travelled to China twice. Show less

  • Assistant Manager

    Apr 2017 - Sept 2017

  • Consultant

    Apr 2015 - Mar 2017

  • Associate Consultant

    Jun 2013 - Apr 2015
• 

  PwC

  Oct 2017 - Jul 2018

  Senior Associate
• 

  KPMG New Zealand

  Jul 2018 - Oct 2020

  • Manager

    Mar 2019 - Oct 2020

  • Assistant Manager

    Jul 2018 - Mar 2019
• 

  Air New Zealand

  Oct 2020 - now

  My expertise lies in designing and rolling out secure and scalable role-based access controls (RBAC) across the organisation to enhance security and operational efficiency.Key Areas of Expertise:1) Product Ownership – Leading RBAC's strategy, development, and delivery, ensuring alignment with business needs.2) Project Management – Driving end-to-end RBAC implementation, stakeholder alignment, and roadmap execution.3) Business Analysis – Gathering requirements for RBAC roles.4) RBAC Implementation – Defining roles and governance frameworks to enable least privilege access across the organisation.5) Stakeholder Collaboration: Partner with application owners, HR, and business teams to ensure a frictionless access experience.6) Process Automation – Identifying opportunities to automate access provisioning and de-provisioning to business applications.7) Compliance & Risk Management: This involves Ensuring adherence to security and regulatory standards and reducing risks associated with user access. Show less

  • Senior Cybersecurity Specialist (Cybersecurity - Identity)

    Jan 2024 - now

  • Internal Audit Manager

    Jun 2022 - Jan 2024

  • Information Technology Internal Auditor

    Oct 2020 - Jun 2022