Sejuti Saha

About Sejuti Saha

Working as Sr IT Audit Manager at Amazon with 12+ years of experience in IT, Security, and Privacy. MBA–IT Business Management (SCIT, Pune). Skilled in global regulations, risk frameworks, and technology governance, with a strong record of driving compliance, innovation, and organizational value.Career Summary:Amazon Sr. IT Audit Manager:GenAI: Built GenAI Privacy Framework to automate reviews, embed privacy-by-design, and ensure scalable compliance.Data Privacy (Privacy Bar Raiser): Led FinOps privacy compliance, aligning with global laws (DPDP, MHMDA, AI Act, PDPL, CBDT). Drove PIAs, dashboards, and data rights readiness.Information Security: Conducted 20+ security reviews, identifying risks and strengthening compliance. Delivered security and privacy training on AWS (S3, EC2, KMS, Lambda, Redshift, RDS), DPIA, and data classification.EY Global Senior Consultant:Worked on SOX/CCAP Access Audit for a leading U.S. bank. Contributed to DIFC Privacy Law implementation and PDPB-based privacy framework for an Indian NBFC. Executed Gap Assessments for Incident and Problem Management to identify key risks.BNP Paribas ISPL Sr. Risk Associate (RISK ORC ICT):Led Data Quality analysis per EBA guidelines. Implemented GDPR modules (PDBR, DPIA, FOM) in ServiceNow. Automated reporting with VBA macros and reconciliation scripts. Designed 2nd LOD control plan mapped to NIST 800-53. Supported DPO with privacy packs, training, and GDPR readiness.Grant Thornton SSC Analyst-Intern:Developed RSA Archer tool for NYDFS compliance self-assessment and dashboards. Gained experience in ISO 27001:2013 audits and NIST frameworks (800-37, CSF).

Experience

1. Senior IT Audit Manager

   Amazon

   Jun 2023 — Present · Karnataka, IN

   Led GenAI and automation initiatives, architecting the FinOps GenAI Privacy Framework and AI-powered Privacy Review Assistant to automate privacy reviews, embed privacy-by-design, and cut review timelines by 40% while enhancing accuracy and compliance scalability.Developed Privacy Assistance AI (PAA) integrating automated PIAs, centralized knowledge base, and policy-aligned recommendations—empowering product and engineering teams to launch privacy-compliant solutions faster and safer.Served as Privacy Bar Raiser, driving global privacy compliance across FinOps and ensuring adherence to DPDP, EU AI Act, PDPL, GDPR, and other major regulations through standardized review frameworks and automated data lifecycle controls.Operationalized privacy governance, including automated retention/deletion mechanisms, DSR readiness, and object-level data classification—strengthening discoverability, accountability, and audit readiness.Delivered 20+ Information Security Reviews, assessing AWS infrastructure, access governance, encryption, and resilience across financial systems, improving overall security posture and regulatory alignment.Built centralized Privacy Compliance Dashboards and data-driven monitoring tools in QuickSight, giving leadership real-time visibility into risk, remediation progress, and compliance maturity.Enhanced privacy culture and capability, designing global enablement programs on AWS security, data protection, and privacy-by-design—strengthening compliance awareness and operational excellence across FinOps teams.

Education

• National Law School of India University

  Post graduate diploma, Cyber Law and Cyber Forensics

• SCIT - Symbiosis Centre For Information Technology

  Master of Business Administration (M.B.A.), Information Security

  2016 — 2018

• Indira Gandhi Memorial High School, Dum Dum

  12th, Science

  2005 — 2007

• Durgapur Institute of Advanced Technology and Management,West Bengal

  Bachelor of Technology - BTech, Information Technology

  2007 — 2011

• Auxilium Convent School, Dum Dum

  10th, General Studies

  1993 — 2005

Skills

• Glba
• Risk Assessment
• C
• Jira
• Pl/Sql
• R
• Jenkins
• IT Grc
• Microsoft Excel
• IT Infrastructure Management
• 23 Nycrr 500 Regulation
• Capability Maturity Model Integration (Cmmi)
• Archer
• Nist -800
• Unix
• Cobit 5
• Information Security
• Nist - Csf
• Gwt
• Owasp
• IT Service Management
• Agile Methodologies
• C++
• IT Audit
• Gxt
• Nist 800-53
• Bugzilla
• Iso 27001
• Javascript
• Html
• Sql
• Linux
• Hibernate
• Risk Analysis
• Risk Management
• Excel Dashboards
• Scrum
• Java
• Microsoft Office
• Shell Scripting