Ritu Bansal

About Ritu Bansal

As Cybersecurity and Risk Consultant with 4 years of experience in GRC, cybersecurity risk assessments, and ISO 27001. After successfully completing end‑to‑end Third‑Party Risk Management (TPRM) assignments for BFSI clients. Currently at EY India, I manage GRC consultancy for BFSI clients, aligning with RBI guidelines supporting them with RBI CSITE remediation, governance and PMO setup, baselining of security gaps, action‑plan development, and remediation tracking through automating applications. I work closely with Technology, Risk, and GRC stakeholders to strengthen security governance, enhance control maturity, and support regulatory submissions aligning with NIST SP 800-53, and ISO 27001 standards. My earlier experience at PwC includes cybersecurity assessments for AI/ML, IoT, and emerging technologies, enabling me to evaluate complex systems and provide clear, actionable security insights.

Experience

1. Grc Consultant

   EY

   May 2025 — Present · Mumbai, IN

   Leading regulatory remediation programs for major financial institutions, driving closure of critical observations and strengthening governance frameworks- Managed end-to-end PMO setup, stakeholder governance, and reporting cadence for multi‑month regulatory engagements, ensuring visibility, issue escalation, and timely decision-making- Conducted baselining and root‐cause analysis for RBI CSITE observations, identifying control gaps, dependencies, and remediation actions across multiple technology and GRC domains- Designed and reviewed remediation roadmaps, defining exit criteria, project plans, KPIs, and implementation pathways aligned with regulatory expectations and industry best practices- Collaborated with cross‑functional teams to evaluate project plans, solution designs, SOP changes, and operating model enhancements across IT, cybersecurity, and compliance functions- Utilized Automation Applications for tracking observations, maintaining progress dashboards, and enabling real‑time governance reporting for executive stakeholders- Ensured strict compliance with contractual, quality, data protection, confidentiality, and professional standards, working closely with internal and client stakeholders under stringent regulatory environments- Coordinated with cross‑functional EY teams and client departments to support onsite delivery, knowledge transfer, and seamless execution of program milestones.

Education

• Vishwakarma Government Engineering College

  Bachelor of Engineering - BE, Electronics and communication

  2015 — 2019

• SCIT - Symbiosis Centre For Information Technology

  Master of Business Administration - MBA, Information Technology Business Management

  2020 — 2022

• Kendriya Vidyalaya ONGC Chandkheda

  High School

  2006 — 2015