Sankha Mondal
Auditor Team Lead
Bengaluru,KA
Summary
DevSecOps/Cloud Ops Security Lead and Auditor Team lead with 8 years of experience specializing in Azure and AWS, with expertise in managing ITGC and SOX Controls. Skilled in reviewing cloud security controls, conducting cyber risk assessments, and ensuring compliance with internal and external audits. Proficient in designing and implementing security solutions for Azure cloud resources, with a focus on maintaining robust security controls. Strong mentorship and team management skills. Passionate about continuous improvement and staying at the forefront of cloud security technologies.
Overview
8
8
years of professional experience
4
4
years of post-secondary education
7
7
Certificates
Work History
System Engineer - Cloud Ops Security
Shell Market India Pvt Ltd
07.2023 - Current
- Security control designs and operations for cloud platforms (Azure, Oracle DB, and AWS) to maintain security and compliance.
- Collaboration with internal and external SOX audits (providing a walkthrough, gathering evidence, and providing the required evidence and samples for testing, etc.).
- Work on security documentation, and DevSecOps process improvements.
- Validate critical security center alerts or cyber threat alerts and take appropriate actions.
LEAD SOLUTION ADVISOR
DELOITTE & TOUCHE ASSURANCE AND ENTERPRISE RISK
4 2022 - 07.2023
- Worked as an external auditor and internal auditor lead on SOX and GAAP audits on Cloud security.
- Review and creation of of SOC 1/SOC 2 reports.
- Accountable for ITGC and SOX controls related to Azure and AWS cloud services.
- Conducts risk assessments for cloud platforms and business initiatives.
- Manages and mentors team members.
APPLICATION DEVELOPMENT TEAM LEAD
ACCENTURE SOLUTIONS PVT LTD.
05.2021 - 03.2022
- Worked as DevSecOps Team Lead responsible for configuring and designing pipeline and repository structure for Java Microservices and Apigee
- Deployment on OpenShift cluster and configuring, automating, and monitoring security checks and gates in pipeline (AppDynamics, SonarQube, Check Marx, Nexus IQ, Kibana).
ASSOCIATE IT COMPLIANCE ANALYST
INGRAM MICRO SSC
- Worked in SOC1/SOX Audit
- User access review (UAR) for the IT Infrastructures and IT Application
- Worked on PBC request with our external Auditors PWC.
SENIOR SYSTEMS ENGINEER
INGRAM MICRO CLOUD
06.2019 - 07.2021
- Worked as a Cloud Administrator
- Responsible for product features Deployment and Configuration using Azure Devops
- Building Pipeline in Azure and release on different Environment and Backend operations.
INFRA DEVELOPER
COGNIZANT TECHNOLOGY SOLUTIONS
02.2017 - 07.2019
- Configuration management, Server build and application migration into Cloud
- Writing and Executing Power Shell/YAML script as per client requirement
- CI/CD operations.
TECHNICAL SUPPORT ENGINEER
HP INC
11.2016 - 10.2016
- Supporting Hardware and IT system for APAC region.
Education
BIDHANNAGAR MUNICIPAL SCHOOL (WBBSE)
01.2000 - 04.2010
undefined
BIDHANNAGAR MUNICIPAL SCHOOL (WBCHSE)
01.2010 - 04.2012
B. TECH - undefined
B. TECH | WEST BENGAL UNIVERSITY OF TECHNOLOGY (ELECTRICAL ENGINEERING)
01.2012 - 04.2016
Skills
GITC/ITGC
SOX
SOC 1/SOC 2 REPORTING
AZURE DEVOPS
AWS SECURITY
AZURE CLOUD SECURITY & IAM SOLUTIONS
SECURITY TOOLS: ZABBIX, APPDYNAMICS, GRAFANA, KIBANA, SONARQUBE, CHECKMARX, NEXUS IQ, PRISMA CLOUD
JIRA
CONFLUENCE
SCRUM/AGILE
Certification
AZ -104: MICROSOFT AZURE ADMINISTRATOR
Timeline
System Engineer - Cloud Ops Security
Shell Market India Pvt Ltd
07.2023 - Current
APPLICATION DEVELOPMENT TEAM LEAD
ACCENTURE SOLUTIONS PVT LTD.
05.2021 - 03.2022
SENIOR SYSTEMS ENGINEER
INGRAM MICRO CLOUD
06.2019 - 07.2021
INFRA DEVELOPER
COGNIZANT TECHNOLOGY SOLUTIONS
02.2017 - 07.2019
TECHNICAL SUPPORT ENGINEER
HP INC
11.2016 - 10.2016
B. TECH - undefined
B. TECH | WEST BENGAL UNIVERSITY OF TECHNOLOGY (ELECTRICAL ENGINEERING)
01.2012 - 04.2016
undefined
BIDHANNAGAR MUNICIPAL SCHOOL (WBCHSE)
01.2010 - 04.2012
BIDHANNAGAR MUNICIPAL SCHOOL (WBBSE)
01.2000 - 04.2010
LEAD SOLUTION ADVISOR
DELOITTE & TOUCHE ASSURANCE AND ENTERPRISE RISK
4 2022 - 07.2023
ASSOCIATE IT COMPLIANCE ANALYST
INGRAM MICRO SSC