Sharmistha Mukhopadhyay
Gurugram
Summary
Strategic Manager with 11 years in business continuity, disaster recovery, operational resilience, and information security. Led assessments, designed recovery frameworks, and facilitated compliance exercises in consumer banking and financial services. Strong consulting background with prominent firms and certifications including CISA, CIPP/E, and ISO Lead Auditor. Expertise in aligning stakeholders across technical, risk, audit, and leadership teams to deliver resilient outcomes.
Overview
3
3
Languages
1
1
Certification
14
14
years of professional experience
Work History
Manager
Deloitte and Touche AERS Pvt Ltd.
Gurgaon, Haryana
04.2021 - Current
- Led second-line-of-defense oversight engagement for multiple G-SIBs across resiliency domains, including operational resilience, business continuity, and IT and cyber resilience, covering the parent company and its global affiliates.
- Led Operational Resiliency framework assessments for multiple consumer and commercial banking institutions, benchmarking against key regulatory frameworks (i.e., UK FCA, DORA, OCC, NYDFS and FFIEC) and peer practices to identify gaps, refine approaches, and recommend practical enhancements.
- Led projects performing current state assessments of resilience and recovery (CARR), conducting business impact analyses (BIA), developing organization-wide business continuity plans, facilitating tabletop exercises, providing improvement opportunities via after-action reports, thereby continuously enhancing operational resilience to ensure essential business functions remain available during disruptions.
- Led engagements with multinational companies assessing their existing DR programs, conducting Technology Impact Assessments (TIA), drafting DR operating models, DR plans, and designing detailed recovery orchestration strategies.
- Established foundational capabilities across Resilience domains, including tabletop simulations, recovery playbooks for mission-critical applications, and executive-ready roadmaps.
- Assessed compliance with regulatory requirements, including DORA, PRA, and HKMA standards, identifying areas for improvement and ensuring adherence to industry standards.
- Led engagements assessing clients’ third-party ecosystem, covering areas such as data privacy, information security, conflict of interest, business continuity and disaster recovery.
- Conducted comprehensive assessments to address operational, technical, and compliance risks associated with external partners.
- Developed TPRM frameworks and tailored questionnaires to evaluate vendor resilience and readiness.
- Supported clients with designing DR test kits, test strategy documents, reviewing application changes affecting DR ecosystem, supporting DR tests, facilitating ITDR tabletop exercises and producing after-action reports.
- Brings hands-on experience supporting SLOD review and challenge, as well as executive reporting.
- Prepared reports, presentations, and documentation for senior management, facilitating informed decision-making and strategic alignment.
- Analysed data using tools such as Excel, Power BI, and Heracles to enhance program performance and drive actionable insights.
Senior Consultant
EY India
Delhi, Delhi
06.2017 - 03.2021
- Performed advisory, gap assessment, and pre-certification audits against ISO 27001, ISO 20000, and ISO 22301 standards, enabling organizations to strengthen governance, compliance, and information security frameworks.
- Conducted Information Security Audits, Regulatory Audits, and Third-Party Risk Assessments, evaluating compliance and identifying control gaps to provide actionable risk-based remediation recommendations.
- Led Business Continuity Management (BCM) and Disaster Recovery (DR) initiatives, conducting BIA, risk assessments, DR planning, testing, and continuity strategy implementation, enhancing client resilience across multiple sectors.
- Delivered training and awareness sessions on Information Security, ISO 27001, Business Continuity, and Disaster Recovery to enhance employee awareness, compliance readiness, and organizational resilience.
Test Specialist
IBM India Pvt Ltd.
05.2012 - 01.2015
- Designed and executed Test Cases, Test Scenarios, and Test Plans based on business requirements, ensuring high-quality and defect-free releases.
- Executed manual testing, leveraging strong knowledge of functional, regression, smoke, system testing, and UAT for web-based applications to ensure reliability and user satisfaction.
- Utilised defect tracking and test management tools like HP ALM / Quality Center, Jira, for efficient logging, tracking, and reporting of issues, enhancing overall testing workflow.
- Collaborated in Agile/Scrum environments with developers, business analysts, and cross-functional teams to validate functionalities and resolve defects, ensuring timely project delivery.
Education
MBA - IT Business Management -
Symbiosis International University
Pune01-2017
B.Tech - Electronics and Communication Engineering
Maulana Abul Kalam Azad University of Technology
West Bengal01-2011
Skills
- Operational resilience
- Business continuity
- Disaster recovery
- Regulatory compliance
- Risk assessment
- Third-party risk
- Project management
- Power BI
- Heracles
- JIRA
- ALM
- Everbridge
- BCIC
Certification
- CISA
- CIPP/E
- ISO 22301:2012 LA
- ISO 27001:2013 LA
- CSA STAR LA
Accomplishments
- Awarded Spot Award, Applause Award, Outstanding Performance Award (OPA) for outstanding performance in Deloitte.
- Awarded Spot Award, Exceptional Client Service Award in EY
Languages
English
Hindi
Bengali
Custom
Gurugram, Haryana, India
Timeline
Manager
Deloitte and Touche AERS Pvt Ltd.
04.2021 - Current
Senior Consultant
EY India
06.2017 - 03.2021
Test Specialist
IBM India Pvt Ltd.
05.2012 - 01.2015
MBA - IT Business Management -
Symbiosis International University
B.Tech - Electronics and Communication Engineering
Maulana Abul Kalam Azad University of Technology