Prathamesh Mayekar Email & Phone Number

Pune, Maharashtra, India

 Compliance: Worked with new and existing athenahealth vendors to ensure initial and continued compliance with Information Security requirements. Reviewed technical controls with vendors, document compliance and exceptions, and report out findings to athenahealth leadership. Project planning and facilitation: Created Information Security related project plans that included deliverables, responsible parties, timelines, budgets, etc. for both athenahealth and 3rd party vendors who work with athenahealth. Conducted check-ins with stakeholders (both internal and 3rd party) to ensure Information Security projects are on track, budget, etc. Process reviews: Ensured periodic reviews are being conducted by business stakeholders for internal and vendor practices to ensure athenahealth is compliant with all regulatory requirements such as HIPAA, HITRUST, etc. Reporting: Communicated and tracked exceptions to athenahealth Information Security policies by vendors.

Mumbai, Maharashtra, India

In a client-facing role, conducted multiple IT Audits, Information System Reviews, Readiness Assessments, and Cybersecurity Reviews for leading Banking & Financial Services Companies: ❑ Performed complete ITGC evaluation across IT platforms including operating systems, databases, and network components as per IT governance, policies and procedures (TOD), and effectiveness of controls (TOE). ❑ Performed system evaluation and audit IT and business process as a part of SOX 404, SSAE 18 and ICFR assessments in accordance with PCAOB/AICPA guidance. ❑ Performed third-party vendor risk assessments, SOC 2 Type II readiness assessments, and IT procurement process reviews. ❑ Performed Technology Risk Assessments in various Internal Audit and IT-themed engagements. ❑ Conducted compliance reviews in alignment with Regulatory guidelines related to System Audit, Cloud Adoption, Cybersecurity, and Cyber Resilience Frameworks. ❑ Performed IT infrastructure assessments for Data Centers and Backup sites. ❑ Reviewed network security posture of client’s intranet and internet-facing applications including firewall rule and security architecture reviews based on NIST Cybersecurity Framework. ❑ Conducted Application Security and Configuration Reviews including Security Operation Center (SOC) and Security Information and Event Management (SIEM). ❑ Responsible for coordinating with the client and its IA team, conducting walkthroughs, preparing the Risk Control Matrix (RCM), performing test procedures, recommending appropriate controls, identifying and reporting gaps, discussing closure observations, and preparing final reports followed by confirmatory testing.

Mumbai, Maharashtra, India

Managed requirements related to Application Security, VAPT, Information Security Reviews, IT Products delivery.Responsible for integrating new features in existing Payment Acceptance Solutions which includes Point of Sale (PoS) Terminals, Mobile Application, SMS payments, QR-based acceptance as well as online payment options.Actively involved in Business Requirement Analysis, Functional Specification Document (FSD), User Acceptance Testing (UAT) Releases.

Gurugram, Haryana, India

As a part of the Cyber Risk Advisory Consulting Practice, responsible for implementation and enhancement of an existing KPI measurement framework as per ISO 27001:2013 clauses aimed at measuring the effectiveness of an ISMS. Exposure to GRC tools such as RSA Archer and PowerBI for better representation of KPIs. Ad-hoc requirements of this project involved identifying cybersecurity risks for Media and Entertainment (M&E) companies undergoing Digital Transformations and the proposal of e-Learning models for designing cybersecurity courses at educational institutions.

Mumbai, Maharashtra, India

Contributed to the advancement of operational risk methods and practices and the using Governance mechanisms in SharePoint 2013 and 2016. Evaluated new business requirements to identify changes to the operational risk profile for clients and ensured proper controls are in place. Reviewed significant events to ensure appropriate remediation plans are implemented, and identification of trends to highlight significant or emerging risks. Conducted quarterly assessments for entities to ensure the Risk and Control Self-Assessment (RCSA) and appropriate measurement approach and rationale has been employed.

Mumbai Area, India

Mumbai Area, India

Sentiment Analysis on Live-Data from Facebook Using 'R' Language

Master Of Business Administration - Mba, Information Technology Business Management (Itbm)

Bachelor Of Engineering (B.E.), Computer Engineering

Bachelors Degree in Engineering (Computer)