Summary
Overview
Work History
Education
Skills
Professional Snapshot
Certification
Accomplishments
Languages
Affiliations
Timeline
Generic
Devjyoti Mahapatra

Devjyoti Mahapatra

IT Risk Management
Hyderabad,TG

Summary

Strategic IT risk and compliance leader with over 17 years of experience driving IT assurance, regulatory compliance, and risk management across global technology and financial institutions. Proven track record in building and leading high-performing teams, optimizing the audit process using data analytics and automation, and generating significant cost savings. Passionate about learning and integrating innovative technologies with governance ecosystems to build resilient, value-driven audit/risk teams.

Overview

17
17
years of professional experience
4
4
Certification

Work History

Senior Manager IT Audit - Financial Risk Management

Uber India Systems Pvt. Ltd.
Hyderabad
11.2021 - Current
  • Directing a cross-functional team of 15 members in driving global compliance assurance for SOX, SOC, ICA, and European Payment regulations.
  • Generated multi-million dollars ($5 M) in cost savings by minimizing consulting fees, implementing RPA, and AI for automation and audit scope rationalization.
  • Drove IT risk transformation through continuous control monitoring and a Shift-Left strategy, resulting in a 30% decrease in audit turnaround time.
  • Analyze and represent cyber incident impacts on fintech tools to senior leadership, articulating Uber's risk posture effectively.

Manager IT Audit - Internal Audit

Invesco
05.2018 - 11.2021
  • Spearheaded IT Internal Audit team at Invesco India, identifying enterprise risks and addressing control gaps.
  • Facilitated annual audit planning and risk assessments, aligning priorities with organizational risk appetite.
  • Conducted complex IT audits, including the full IT-SOX cycle, cloud security, cybersecurity, vulnerability assessments, and advised on the security posture of emerging technologies like RPA and AI.
  • Delivered IT risk insights to enhance business process audits.

Assistant Manager - Operational Risk

AXA Business Services (AllianceBernstein)
12.2013 - 05.2018
  • Led a 10-member team managing audits, automation, KPI reporting, ISO-27001 compliance, and ensured control effectiveness by liaising with the Tech Owner, App Owners, and Security Admins.
  • Built and monitored RCSA and EUC compliance frameworks, alongside conducting thorough quality checks.
  • Oversaw maintenance of firm-wide initiatives such as SOWs, BIA, BCP, and compliance documents.
  • Conducted staff performance evaluations and arranged regular 1-on-1 meetings to discuss ongoing challenges and resolve conflicts.

Senior Analyst - SOX 404 and Regulatory control testing.

Credit Suisse (now UBS)
09.2009 - 11.2013
  • Key member of FA-ORC & SOX 404 compliance team, coordinating group-wide regulatory framework requirements.
  • Conducted SOX IT control testing, managed issue reporting, and remediation testing.
  • Established a global regulatory system in MARCS, defining specifications for the IT team, and served as a subject matter expert for MARCS ITC and regulatory controls domains.
  • Facilitated GRC tool UAT for new implementations and enhancements, and provided training to new staff to enhance team capability.

Associate - Conducted portfolio audits, reported fund performance.

State Street Syntel Services
06.2008 - 07.2009
  • Served as key team member handling client accounts for Performance & Analytics at State Street.
  • Conducted audits of portfolios and verified accuracy of returns for mutual, pension, and hedge funds.
  • Calculated Dollar Value Added (DVA) and Internal Rate of Return (IRR) for various portfolios.

Education

Post-Graduate Certificate - CyberSecurity Management & Data Science

Indian Institute of Management (IIM)
Nagpur
06-2023

Bachelor of Commerce - Banking And Finance

Pune University
Ness Wadia College
04-2008

Skills

  • People leadership
  • Program management
  • IT audit and risk management
  • Compliance frameworks: SOX, SOC, ICA, ISO 27001, COSO, NIST, CIS
  • Data privacy management
  • Cybersecurity audits
  • Cloud security: AWS, GCP
  • Code review tools: GitHub, Bitbucket, CodeCommit
  • AI tools: Copilot, ChatGPT, Gemini, Michelangelo
  • RPA tools: UiPath, Blue Prism, Power Automate
  • GRC platforms: Audit Board, Workiva, ServiceNow

Professional Snapshot

  • Risk leadership across LoDs: Throughout my career serving three Lines of Defence, I have led enterprise-wide audit and risk programs, embedded risk identification into Agile and SDLC pipelines, and have adept knowledge of managing IT risk and compliance frameworks like RCSA, SOX, SOC, ICA, European payment compliance, end user computing (EUC), and ISO 27001 Effectively planned, coordinated, and executed complex security and technical audits like Cyber Security, Cloud Security, Patch and vulnerability, Malware Defence, Robotics Process automation, and AI Governance, ensuring compliance with NIST and CIS frameworks.
  • Process optimization and governance: My leadership has consistently delivered measurable impact, from significant cost savings through automation and process improvements to the deployment of AI-driven testing tools and continuous control monitoring (CCM) frameworks using RPA that elevated audit turnaround and risk predictability
  • Strategic leadership and stakeholder engagement: Very effective in building and managing cross-functional, high-performance risk teams, and driving critical and impactful projects. I am effective in engaging with very senior stakeholders, like CISOs, CTOs, engineering leads and audit partners to articulate risk posture, influence governance decisions and drive remediations

Certification

  • Advanced in AI Audit (AAIA) certification (pursuing)
  • Certified Information System Auditor (April 2018)
  • Certified AWS Cloud Practitioner (January 2021)
  • Tableau Certified [Duke University] (June 2019)
  • CFA Investment Foundation Certified (November 2018)

Accomplishments

  • Generated more than $5 million in cost savings in the assurance function at Uber, and awarded best performers across leads in the department
  • Honored as gold medalist for scoring the highest in CISA (2018) in the entire ISACA Hyderabad chapter
  • Awarded 'Best Assistant Manager' in Asset Management CoE in 2016
  • Received the best 'Eureka Team' award for two consecutive years as a team lead for the most efficient ideas generated in 2014 and 2015
  • Awarded the individual excellence award for the principle 'Tolerate nothing short of excellence,' 2012, in Credit Suisse

Languages

Hindi
First Language
English
Proficient (C2)
C2
Bengali
Proficient (C2)
C2

Affiliations

  • Actively contribute to cross-functional CSR initiatives focused on digital literacy and cybersecurity awareness for underserved communities, aligning social impact with organizational values
  • Regularly mentor early-career professionals and students in the audit, risk, and security domains through ISACA Hyderabad and LinkedIn outreach, fostering inclusive talent pipelines
  • Featured speaker at industry panels and internal leadership forums on topics such as 'Evolving Landscape of GCCs' and 'Ethical Automation in Security Operations'
  • Advocate for mindful leadership and sustainable work practices, participate in wellness challenges, and team-building retreats to promote holistic team health

Timeline

Senior Manager IT Audit - Financial Risk Management

Uber India Systems Pvt. Ltd.
11.2021 - Current

Manager IT Audit - Internal Audit

Invesco
05.2018 - 11.2021

Assistant Manager - Operational Risk

AXA Business Services (AllianceBernstein)
12.2013 - 05.2018

Senior Analyst - SOX 404 and Regulatory control testing.

Credit Suisse (now UBS)
09.2009 - 11.2013

Associate - Conducted portfolio audits, reported fund performance.

State Street Syntel Services
06.2008 - 07.2009

Post-Graduate Certificate - CyberSecurity Management & Data Science

Indian Institute of Management (IIM)

Bachelor of Commerce - Banking And Finance

Pune University
Devjyoti MahapatraIT Risk Management