Accomplished Enterprise Risk Management (ERM) & Governance Leader with over 17 years of experience in risk advisory, operational resilience, and compliance. Certified in ISO 31000 and ISO 27001, with deep expertise in designing ERM frameworks, risk appetite models, and cross-mapping global standards to regional mandates (including UAE NESA and ISR). Uniquely skilled in digitizing risk operations using Power BI and Python to automate risk aggregation and deliver real-time, business-centric executive dashboards.
Overview
20
20
years of professional experience
1
1
Certification
Work History
Lead Consultant – IT Risk & Compliance
AstraZeneca India Pvt Ltd
Chennai
2023.08 - Current
ERM Framework & Governance Design: Manage the authoritative Enterprise Risk Register within a highly regulated global environment. Drive the ongoing assessment and implementation of operational and cyber risk frameworks, aligning global baselines (ISO 27001) with regional expectations.
Risk Appetite & Exception Mapping: Lead a strategic initiative to map enterprise control baselines and identified risks directly to documented policy exceptions. Designed a defensible governance model for risk acceptance, waivers, and tolerance setting across business units.
KRI Reporting & Dashboard Engineering: Architected the central Risk Power BI dashboard for the Quarterly Leadership Team (QLT). Engineered complex data models and dynamic entity-switching to deliver real-time KRI/KPI analytics, heat maps, and mitigation burn down to executive stakeholders.
Automation & Process Optimization: Spearheaded the digitization of risk operations, developing custom MS Forms, embedded Power Apps, and AI-assisted Python scripts. Accelerated vulnerability triage and reduced manual review effort by 70%.
Global Stakeholder Management: Facilitate key governance forums and partner with regional leads across the UK, US, Sweden, Mexico, and India to standardize risk structures and ensure proactive, cross-functional risk ownership.
Promoted to Lead Consultant after showcasing outstanding performance in the first year of the Senior Consultant role.
(Highly Regulated Pharmaceutical Environment)
Manager – Risk & Compliance
HCL Technologies Ltd
Chennai
2019.07 - 2023.07
Framework Implementation: Led the design and execution of risk and control self-assessments, PIA, BIA, and compliance readiness programs (ISO 27001, SOC1, SOC2, GDPR, HIPAA) tailored to specific client regulatory and operational needs.
Engagement & Delivery Management: Managed end-to-end delivery of risk management advisory engagements across enterprise client accounts, ensuring timely, scoped, and quality-aligned assessments.
Client Relationship Leadership: Acted as the primary client contact and led governance meetings with account leadership. Presented risk postures, control gaps, and strategic remediation recommendations clearly to senior management and operational stakeholders.
Consulting Team Leadership: Led, coached, and reviewed the work of consulting teams, managing workload allocation and strengthening internal capabilities through structured mentorship and on-the-job development.
Business Development Support: Supported engagement scoping and proposal development, identifying follow-on and cross-service compliance opportunities within existing client accounts.
Lead
CSS Corp Pvt Ltd
Chennai
2016.09 - 2019.06
Led and delivered multiple audit and compliance initiatives while managing a team of 10.
Coordinated remediation efforts with business teams to facilitate timely closure of identified compliance gaps, improving risk management.
Presented compliance status and risk posture during monthly/quarterly customer business reviews, informing stakeholders and guiding decision-making.
Conducted internal assessments to ensure adherence to ISO 27001 and corporate security frameworks, enhancing overall compliance.
Project Coordinator
ProdaPt Solutions Pvt Ltd
Chennai
2013.12 - 2016.08
Advised business teams on effective control implementation and remediation practices to meet compliance requirements.
Facilitated external auditors by coordinating evidence collection processes for seamless audits.
Conducted IT security and compliance assessments to identify vulnerabilities across projects.
Team Leader
Wipro Ltd
Chennai
2006.10 - 2012.11
Led 30-member team to deliver multiple concurrent projects, ensuring timely completion and quality standards.
Facilitated risk awareness and compliance alignment through regular reviews and engagement with leadership.
Reviewed contracts, MSAs, and project documentation to identify risks and communicated findings to stakeholders.
Education
MSc - Cyber Forensics and Information Security
University of Madras
2025-01
Bachelor of Computer Applications (BCA) -
University of Madras
Skills
IT Risk Management & Governance (GRC)
Internal Audits & Compliance Assessments
Information Security Frameworks (ISO 27001, SOC1, SOC2)
Data Privacy Regulations (GDPR, HIPAA)
Risk Register Management
Mitigation Oversight & Control Improvement
Risk Reviews & Evidence Validation
Power BI (DAX, RLS, Data modelling)
Executive Reporting & Data visualisation
Stakeholder Management & Leadership
Cross-Functional & Global Collaboration
Workshop Facilitation & Training
Certification
Certified Information Systems Auditor (CISA) – ISACA
ISO 27001:2022 Lead Auditor
ISO 31000:2018 Risk Management
Completed 'Leading-Self' Leadership Program (AstraZeneca).
AZ Generative AI Accreditation Program - Gold Certificate (AstraZeneca).
Websites, Portfolios, Profiles
www.linkedin.com/in/sanvasanth
Certifications, Awards, & Development
Recognized with 'Achievers League – O-Infinity' Award for outstanding performance across consecutive years (HCL)., Awarded 'Best Motivator' for leadership excellence and team enablement (CSS Corp).
Data Security & Privacy Consultant/ Governance, Risk and Compliance at IBM RomaniaData Security & Privacy Consultant/ Governance, Risk and Compliance at IBM Romania