Pallavi Tondare

About Pallavi Tondare

Strategic and results-driven Security Risk and Compliance Professional with 7+ years of…

Experience

1. Transformation Excellence Consultant

   埃森哲

   Jun 2022 — Present · Hyderabad, IN

   Analyzed and interpreted the Digital Operational Resilience Act (DORA) requirements, ensuring alignment with underlying policies and frameworks.• Collaborated with project security officers, ISOs, and assurance teams to track compliance progress and security controls.• Identified key artifacts and conducted investigative assessments to determine compliance deliverables and stakeholders.• Collected and reviewed compliance evidence such as SOC 2 Type 2 reports, ISO 27001 certifications, and authorization concept documents.• Performed gap analysis to verify alignment of collected artifacts with DORA regulatory requirements, supporting compliance claims.• Initiated and tracked mitigation steps for non-compliant deliverables to ensure adherence to DORA security mandates.• Conducted a gap analysis of the data archival process for Splunk and designed an archival solution for Splunk, MS Sentinel, and Google SecOps SOAR.• Developed weekly status reports and solution design presentations to communicate progress to stakeholders.• Acted as a Security Business Analyst, analyzing banking business processes, systems, and security risk posture to define future-state improvements.• Identified business requirements, drafted use cases, and defined success criteria for Integrated Cloud Email Security Solutions.• Defined service offerings, created RACI matrices, developed runbooks, incident response scenarios, and support models, ensuring seamless project execution.• Performed a security maturity assessment for a bank, evaluating compliance with 23 NIST categories.• Assessed the technology landscape and cybersecurity capabilities using NIST CSF and CIS Benchmarking across 80 servers.• Identified security gaps impacting the bank’s risk posture, performed high-level risk analysis, and provided recommendations to enhance cybersecurity maturity.

Education

• Savitribai Phule Pune University

  Bachelor of Engineering - BE

• Symbiosis Institute of Digital & Telecom Management (SIDTM), Pune

  Master of Business Administration - MBA