Esha Malhotra

Details

Skills

analysis, auditing, building relationships, business continuity, business process, change management, CISA, cobit, compliance pci, coso, cross-functional team leadership, data privacy, enterprise resource planning (erp), enterprise risk management, erp, external audit, financial risk, gaap, Governance, identity management, Information Security, information security management, Information Technology, Internal Audit, internal controls, IT Audit, it management, Leadership, Management, operational risk, project management, risk assessment, Risk Management, safe harbor, sap, Sarbanes-Oxley, sarbanes-oxley act, sas70, Security, software documentation, strategy, vendor management, Enterprise Risk, Cross-functional Team, Access, Process Improvement, Business Analysis, US GAAP, SDLC, Microsoft Excel

About

Highly experienced CISA certified Cyber Security, IT Audit, & Security Compliance professional with the proven ability to manage and drive success through innovative ideas and solutions in the most complex IT environments. Collaborative, dynamic leader with an evolving legacy of influencing and improving security and compliance at scale, driven by quality and efficiency across all programs, data-driven decision-making, and precise tactical controls. A strong history of leading and growing security compliance teams, setting security strategy, developing risk assessment and mitigation programs, and building and leading compliance programs. Demonstrated ability to influence and manage deliverables across a highly diverse, cross functional, global organization. Extremely effective in implementing key controls and best practice IT audit operating methodology, information security, and risk management strategies. 17+ years of experience across Big 4 IT risk and assurance, and industry experience in internal audit, security, advisory compliance, business process, privacy, regulatory IT compliance, and IT controls. Well-versed in turning around ineffective processes and controls by envisioning and executing future-state models of best-in-class assessments through dedicated, high-performing teams. Results-oriented, bringing stakeholders at all levels of the organization together, and introducing new, consistent ways of achieving results. Regulatory compliance expertise: Privacy Data Security (GDPR / CPRA, etc.), SOX, PCI, SSAE 18 (SOC), ISO 27001/002, NIST, TPN / MPA, Swift, TPRM.



Providing Security Compliance and Internal Control executive consulting services for companies looking to build attestation programs, and that are required to comply with various regulatory requirements, Privacy Data Security (GDPR / CPRA, etc.), SOX, PCI, SSAE 18 (SOC), ISO 27001/002, NIST, TPN / MPA, Swift, and TPRM requirements.