Ankush Deshmukh

About Ankush Deshmukh

As Technology (Cyber Security & IT Controls) Risk & Audit Leader, I help organizations strengthen their governance, resilience, and compliance maturity through actionable insights and data-driven risk strategies.With over a decade of experience across Banking, Healthcare, and Technology Consulting, I specialize in bridging the gap between technical risk and business objectives - ensuring that cybersecurity and controls enable growth rather than restrict it.My expertise spans 1LOD and 2LOD control testing, data-led audits, and risk analytics, alongside leadership in Cyber Defense Audits, Application Security Reviews, HITRUST & PCI-DSS Certifications, and Cloud & Vendor Risk Assessments. Earlier in my career, I gained hands-on experience in VAPT, Application Security, and defense-in-depth implementations, which shaped my end-to-end understanding of technology assurance.I’m passionate about transforming complex risk data into meaningful dashboards and insights that empower control owners and leadership to make faster, smarter, and more resilient decisions.Key Certifications: ISACA: CRISC | HITRUST: CSF| ISO 27001:2022 LA | ISO | ISO 27701:2019 LA | ISO 22301:2019

Experience

1. Assistant Vice President -technology Risk

   HSBC

   Feb 2024 — Present

   Key Responsibilities & Achievements• Application control testing of IWPB (International Wealth and Premier Banking) applications• Reviewed BCP/DR controls for applications to assess resilience, failover readiness & adherence to enterprise continuity standards.• Strengthened information protection by evaluating data security and removable media controls across ~500K endpoints globally.• Conducted IDAM control testing covering access governance, user lifecycle management, and privileged access across 13K applications.• Performed network resilience reviews with emphasis on architecture robustness, redundancy, and identification of single points of failure-including both circuit-level and network-node risks.• Validated data destruction and lifecycle management processes across global IT infrastructure to ensure regulatory compliance and secure data handling.Data-Led Testing & Continuous Monitoring : Introduced a data-driven testing approach by collaborating with the Analytics team resulting in more accurate insights, repeatable automated controls, and dashboards for continuous monitoring and leadership reporting.Operational & Financial Oversight: Managed monthly staff billing across HSBC entities, including updates driven by organizational changes, ensuring transparent and accurate cost allocations.Cross-Functional Delivery• Contributed to the GMG Payment Gateway review, working with Finance, Analytics, Data Visualization, IT & Cybersecurity to deliver a comprehensive gap assessment and monitoring dashboards.• Lead the annual SWIFT infrastructure IT & Cyber control attestation, supporting regulatory reporting with structured evidence and control validations.

Education

• Jawahar Navodaya Vidyalaya - JNV

  SSC

• Jawahar Navodaya Vidyalaya - JNV

  HSC, Computer Science

• Dr. D. Y. Patil Vidyapeeth

  Bachelor of Engineering (B.E.), Electronics Engineering

Skills

• IT Audit
• Database Administration
• Server Administration
• Iis Administration
• Asset Management
• Ccna
• Business Continuity Planning
• Active Directory
• Microsoft Office
• Security
• Iis
• Operating Systems
• Telecommunications
• Itil
• Testing
• Servers
• Java
• Network Administration
• Sql
• Databases
• Risk Assessment
• Exception Management
• Information Security Management System (Isms)
• Information Security
• Information Security Management
• Hardening Reviews
• Exception Handling