Anshuman Mishra Email & Phone Number

Melbourne, Victoria, Australia

Bank First, formerly known as Victoria Teachers Mutual Bank, is an Australian financial institution based in the state of Victoria, Australia. As a mutual bank, Bank First is owned by its customers and not external shareholders. Each of its over 110,000 customers owns an equal share of the organization. Like other Australian financial behemoths, Bank First is regulated by APRA and complies with CPS 230 and CPS 234 prudential standards. As part of the Cybersecurity function, my role takes care of some of the below activities:o Drive Information Security - Compliance related initiatives in a regulated environment.o End-to-end implementation of CPS 234 related controls as per APRA guidelines. Initiatives related to executing control testing activities against the risks identified within business.o Risk assessments of vendors and suppliers.o Setting up Security Incident Management processes for investigation from Cybersecurity standpoint. Vulnerability assessments, attack surface mitigation and patch management analysis.o Post incident analysis, internal stakeholder management for continuous improvement. o Review of Risk Appetite and Risk Capacity of the organization through Board’s approval. o Senior Management reporting related to KPI and KRIs of Cyber function. o Security reviews of vendor contacts for third party risk assessments and fourth party risk analysis. o Internal audits as per ISMS standards considering both ISO27001 and ISO27701 standards. o Information security reviews as per NIST framework. o Effective reviews of RFPs and RFIs responses for the CISO function.

Managed Secure Delivery and Cybersecurity within the CISO function, where I have honed my skills in several key areas relevant to the GRC Analyst position. My responsibilities have included reviewing and enhancing vulnerability management procedures, analyzing emerging threats, and managing a variety of security audits including ISMS External Audits, SOC 1 and SOC 2, and NIST. I am particularly proud of successfully executing the ISO re-certification audits, achieving certification without significant gaps, and receiving commendations for my due diligence in RFI and RFP responses.

Planned and conducted risk assessments, Gap assessments, faced client specific third party audits, conducted internal ISMS audits, streamlined Exception Management processes and tools that aligned with clients' business requirements and investigated ongoing security incidents for enterprise. Compiled Risk exposure reports for specific clients as per the current cyber posture and planned risk mitigation techniques keeping in mind the Cybersec C.I.A. triad.

As a Senior Technical Consultant at Fujitsu and a Senior System Engineer at Tech Mahindra have provided me with a robust foundation in enterprise risk governance, security controls, and compliance frameworks. At Fujitsu, I managed governance of enterprise risks, prepared monthly reports for the IS Risk Committee, and drove ISO 27001 certification and continual assessment audits.

At Tech Mahindra as a Senior System Engineer, my role focused on data storage, network administration, cloud security and compliance with SOX controls, further strengthening my expertise in managing information security risks. Different tools were used to check and work on Governance, Risk and Compliance. This was a client facing role to make sure that clients are compliant as per international industry standards.

My role was investigate and resolve incidents, changes and problems tickets coming in as part of the Data Centre and SOC operations. Resolved and streamlined ITIL processes for multiple clients. This included Major Incident Management (MIM) and executing planned changes in the current infrastructure environment.