Amol Pathak Email & Phone Number

Bengaluru, Ka, In

India

• As a TISG Lead in ANZ Digital Banking Operations Technology team, my responsibility is to drive technology operational risk excellence using the ANZ Risk Management Framework. In my current role i am responsible for supporting Country Technology teams to ensure their key risks are understood and well managed. In addition, ensuring to drive successfully continued information security maturity uplift and support technology regulatory compliance for the respective jurisdiction(s).• As a partner i work closely with various stakeholders to perform assessments, interpret requirements, report/track findings and take action to ensure effective delivery of ANZ’s operational risk framework responsibilities – partnering with risk owners to deliver the required subject matter expertise on Technology and Information Security risk themes including associated oversight of obligations to support relevant Country Risk Theme Officers.• In this role, my responsibilities also include managing internal audit and external regulatory engagements for the assigned portfolios to support positive outcomes and execution of associated treatment plans. Perform, lead and/or provide input into risk assessments as well as assessments against country technology regulatory requirements and develop strong relationships with business stakeholders.• Responsible for leading activities to sustain and improve compliance with internal information security policies and external regulatory requirements, determine technical and business impacts from technology risks or security controls such as penetration testing, independent security assessments etc., building staff and customer security awareness through delivery of communication and training programs, and providing business support and leadership on information security matters.

Bengaluru Area, India

• In this role my responsibilities include advising our clients on the enterprise transformation and complex modernization's of their applications for cloud and lead our clients’ in cloud adoption journey. As a Strategy Consultant my role requires the ability to work with the client's IT team, as well as C-level executives to demonstrate the cloud value proposition. This includes assessing the current application and infrastructure environment, performing a gap analysis, and recommending the to-be application solution architecture along with business case / economic model.• As an Enterprise Transformation architect, my role requires to represent deep expertise on modernization of applications currently running on traditional or legacy environments, transformation of mission critical applications needing re-architecture that goes beyond containerization or refactoring.• Demonstrate knowledge of complex application architecture, legacy applications and other platforms as a service offering in the market, cloud application architecture and best practices, API management, Microservices, DevOps, and cloud integration suites to advise our clients on their hybrid cloud journey and multi-speed IT.• Providing strategic security insights acting as a Qualified Security SME, leading and managing consulting engagements, helping clients build their Information Security Strategy roadmap, align their practices to relevant Industry Security Standards and provide advisory guidance in building adequate practices, controls and automation in order to strengthen their cyber security posture.• Requirements gathering and solution designing for prospective clients, building customized solutions like proposals, phases wise delivery structure and project plans, in the areas of Governance, Risk Management and Compliance.• To develop detailed project delivery methods, in order to bring in uniformity and efficiency, along with strong value add for potential delivery engagements.

Bengaluru Area, India

• Responsible for executing and managing consulting engagements in the areas of Security Strategy Risk and Compliance. • Managing Projects and Programs in the area of IT Security Controls Governance for Global leading Oil and Gas Company.• Managing Projects and Assignments including Data Security & Privacy, ISO 27001 Implementation, and PCIDSS & PADSS Gap Analysis, Implementation and Certification.• Payment Applications Security Gap Analysis & Audit Experience covering core banking applications and payment gateways and digital wallets and mobile applications as per Payment Application Data Security Standard (PADSS).• Managing and coordinating Incident and emergency response management activities covering support for clients including collecting data for significant incidents including data breaches and investigating incidents and finding root causes for incidents with evidence to support investigation• Security Consulting for clients in the payment industry on Account data compromise best practices and procedures for notifying payment brands in the event of breach and preserving evidence.• Handling Information Risk Management (IRM Team) for Governance of Enterprise Identity Management System for a client in Chemical & Petroleum Industry.

Bangalore

• Implementation of Data Security & Privacy Framework for offshore clients• Conducting Risk Assessments & Application Security Reviews• Implemented ISMS Framework for BFSI clients• Developing Implementing Business Continuity & Disaster Recovery Strategy and Testing DR plans for Oil & Gas Corporations.• PCI Project Solutioning (PCI Assets and Global Practice Framework)• PCI Assessor Quality Assurance Program Reviews for PCI 3.0 as per the councils reporting guidance and instructions. • IT Governance Controls Monitoring & Testing for Business Critical Applications and Infrastructure Services

Bengaluru Area, India

• PCI DSS Gap Assessments and Certification audits.• Payment Card Industry Trainings & Managed Security Services Consultancy.• Internal Network and Application Vulnerability Assessments and Security ConfigurationTesting• ISO 27001 & 22301 Gap Audit & Implementation• Developing IT Security Policies & Procedures as per Industry best practices like SANS,CIS,NIST.• Network Security Architecture Design and Implementation • Security Audit of Databases, Operating Systems Platforms, Network and Security Devices.• Risk Assessments using structured risk assessment methodologies like the OCTAVE®, NIST SP 800-30, ISO27005• Forensics Investigation and Analysis for Frauds & Incidents as per PCI PFI program guidelines.

Bengaluru Area, India

• Performing Internal & External Vulnerability Assessments of PCI Scoped environments using Qualys Guard Appliance and Nessus.• ISO 27001 & 27005 Implementation using GRC tools • Information Security Audits, PCI DSS & PA DSS readiness assessments and certification audits.• ISO 27001 Implementation for leading Global Telecommunications Service Providers.• Conducted various trainings on PCI DSS, PA DSS, and Risk Assessment etc.• Project Manager for various PCI DSS / PA DSS and ISO 27001 consulting & implementation projects including International Airlines, Multinational Banks, Service Providers, and Offshore Development Centers.

Master Of Science, Cyber Laws & Information Security, A

Activities and Societies: IIITA Effervesence Annual Cultural Event Master of Science in Cyber Laws & Information Security (MSCLIS)

Pgdba, Marketing Management, A

Post Graduate Diploma in Business Administration Specialization - Marketing Management Additional Specialization - Human Resource Management

Bachelor Of Legislative Law, Cyber Laws (It Act) & Intellectual Property Rights, B

Activities and Societies: Moot Court / Extempores D.E.S. Law College, Pune - Affiliated to University of Pune, approved by Bar Council.