Subarna Bhowmik

Experience

• 

  Bank of Baroda

  Apr 2013 - Jun 2013

  Summer intern

  worked on two projects on information security1. VAPT of the network of Bank of Baroda - Determining the network architecture of Bank of Baroda, Kolkata office - Using tools like LANSTATE Pro, superscan to build the network layout consisting of desktops, laptops, routers and printers along with the IP Address and other details - Worked on tools like Wireshark and NMAP to determine packet transfer and identify abnormalities in the network and present report the Senior IT Manager - Identified and reviewed Bank of Baroda network and provided framework based approach in a documented report2. Internal Audit on PCI DSS of Bank of Baroda - Detailed study on Bank of Baroda PCI- DSS process and how it is implemented - Conducted Self-Assessment Questionnare (SAQ) for the Bank of Baroda, Kolkata head office with concerned teams along with support from Security Operation Center from Mumbai Office. - Furnished report on PCI-DSS containing the relevant requirements on a checklist format. Show less

• 

  HCL Technologies

  May 2014 - Feb 2016

  Security Consultant- Risk and Compliance

  - Conducting ISMS Audits for accounts across verticals like Retails, Gaming, E-Commerce, Banking and Financial Sectors- Delivery Compliance Officer (DCO) for multiple accounts across the Organization- Conducted SSAE16 SOC 1 Type II Internal Audits across various facilities in Chennai- Conducting Project- specific Audits based on ISO 27001 and providing recommendations on Observations- Coordinating with Senior Delivery Heads and Business heads to ensure maximum compliance across Engagement- Working with respective support functions like IT, Admin, HR to closely follow up on remediation plans proposed and approved from the engagement- Conducting Information Security Awareness Session for New Joiners across Chennai region and also Engagement specific Awareness Sessions- Carrying Internal ISMS Audits for various projects as a part of ISO 27001- Developed a common Framework applicable for all DCOs across the organization- Worked with a team of five members,in an initiative called CSMP- top 20 accounts identified based on revenue from those engagement, carrying Audits and Compliance based on ISO 27001- Reviewing Risk Control Matrix (RCM) framework developed for all DCOs to be used across all major accounts in HCL based on Size (FTE) and Revenues generated from the respective accounts Show less

• 

  Ocwen Financial Solutions Pvt. Ltd. - APAC

  Mar 2016 - May 2017

  Senior Information Security Analyst

  - Reviewing vendor responses to questionnaire along with relevant artifacts shared by vendor- Performing prelimiary assessment and providing summary report to Onsite Audit team- Performing desktop audits for tier 2 vendors which includes document findings, confirm and document issues and complete and Audit report- Review Audit reports for team members and provide neccessay feedbacks

• 

  PricewaterhouseCoopers - Service Delivery Center (PwC SDC)

  Jun 2017 - Nov 2018

  Senior Associate

  Working in third party risk management of multiple clients from different industry like banking, retail, being involved in the following roles and responsibilities:- Perform Quality check reviews over onsite assessments conducted on different types of vendors- Conduct and facilitate Remote assessments for vendors of different sectors like law firms, retail, cloud service users, etc.- Utilizing various industry standards and regulations like PCI DSS, ISO 27001, CSA-CSM in developing controls checklist and performing assessments- Performing security reviews of prospective vendors prior to contract and negotiation- Monitoring and assisting clients in risk remediation plans for identified findings from different assessments- Conducting periodic security awareness and knowledge training amongst team members- Assisting onsite counterparts in planning audits, facilitating assessments and walkthrough of processes involved Show less

• 

  Deloitte India (Offices of the US)

  Nov 2018 - now

  Looking after a broader portfolio of engagements in the TPRM space, fostering relationships with my clients, peers and leaders and working towards the next-gen functionalities and automation in Cyber space.

  • Senior Service Delivery Manager

    May 2024 - now

  • Service Delivery Manager

    Jun 2022 - May 2024

  • Senior Service Delivery Advisor

    Aug 2020 - Jun 2022

  • Lead Solutions Advisor

    Nov 2018 - Aug 2020