Pallavi Kishor Joshi

About Pallavi Kishor Joshi

Technology professional with over 10+ years of experience within Internal Audit managing Core Technology and Cybersecurity domains. My experience is enhanced by my Master\'s degree in Information Management and my Certified Information Systems Auditor (CISA) certification. I am currently working a Senior Audit Manger responsible for managing the Cybersecurity domain within M&T Bank\'s Internal Audit Department. Previously I worked at Goldman Sachs within the Internal Audit Department managing core technology audits. At M&T I am responsible for performing Risk Assessments, creating annual risk-based Audit Plan for Cybersecurity Domain, making appropriate staffing decision.I then drive a team of 4-5 auditors to execute those critical projects by overseeing the planning and delivery of the audits. I have a proven track record of delivering results in challenging environment. I am effective at building relationships with senior business and technology stakeholders and mentoring diverse teams globallyPreviously, I have 4+ years of work experience as a software developer where I was involved in gathering requirements, performing system analysis, developing software applications and performing quality assurance to ensure that application is developed as per client requirements. I was also involved in performing root cause analysis which helped her to identify potential gaps in the systems and processes. Competencies (but not limited to): Governance and Risk Management; Private and Public Cloud Computing; Mobile Application Security and BYOD; Technology Risk and Control Self Assessment (RCSA); Critical Infrastructure Systems and Platforms; Network Security and Operations; Incident and Problem Management, Network Resiliency; Data Loss/Leakage Prevention; Business Continuity Planning and Disaster RecoveryCertifications : Certified Information Security Auditor (CISA), exam passed in June 2017

Experience

1. SVP Senior Information Technology Audit Manager

   M&T Bank

   Mar 2023 — Present · NJ, US

   Lead the cybersecurity audit portfolio, including risk assessment, planning, execution, reporting and follow-up • Develop multi-year cyber audit strategy aligned to enterprise risk appetite, regulatory priorities and emerging technology• Led a team of cybersecurity audit professionals providing mentorship, performance oversight and professional development.• Drive enterprise-wide reviews of cyber governance, cloud transformation, vulnerability management, identity and access management, data security, incident response and resiliency. • Presented quarterly executive-level updates, providing insights into emerging risks, strategic priorities, and audit outcomes to senior management and the Audit Committee.• Partnered with CISO, CTO and risk leadership to evaluate risk mitigation strategies and control effectiveness.• Played a key role in regulatory interactions representing internal audit during cybersecurity exams and inquiries.• Build cyber audit talent through structured mentoring, training and upskilling programs

Education

• University of Mumbai

  Bachelor of Engineering (B.E.), Computer Engineering

  2006 — 2010

• Welingkar Institute of Management

  Post Graduate Diploma in Business Administration, E-Commerce/Electronic Commerce

  2012 — 2014

• Syracuse University

  Master of Science (M.S.), Information Science/Studies

  2014 — 2015

Skills

• Sql
• Quality Center
• Unix
• Uml
• Oracle Sql
• C++
• Business Analysis
• Microsoft Office
• Microsoft Sql Server
• Oracle
• Requirements Analysis
• Pl/Sql
• Microsoft Excel
• Windows
• Java
• Html
• Requirements Gathering
• Software Development Life Cycle (Sdlc)
• Testing
• Databases
• Mysql
• Project Management
• Web Services
• C
• Software Development
• Sdlc