Shekhar Chandel

• Expertise in drafting risk reports for senior management, handling policy exception requests, and coordinating cross-functional teams to complete risk assessments.
• Drive risk objectives and provide periodic updates on critical/high-risk areas to senior management and the CISO via the operational risk register.
• Supported the development and monitoring of KPIs to track policy compliance and security risk exposures, providing regular updates to management.
• Lead and represents the Deloitte Information Security (DIS) team in the Software Governance Board (SGB), providing consulting and advisory expertise on external applications/software.
• Contributed to the development of updated UK Deloitte Cybersecurity GRC Risk Management Service Terms and Methodology, and assisted in documenting NSE Wider Integration Service Terms.
• Assess predefined security controls, conduct tests, and perform quality assurance checks to ensure compliance with relevant criteria.
• Collaborate closely with various Deloitte UK and NSE (North South Europe) business and project teams to ensure alignment and effective Risk management. Clearly articulate the business impact, including inherent and residual risk ratings, and provide recommendations to both technical and non-technical audiences, including senior management.
• Manage Exception management against the standards and policies, understand the Business needs and provide guidance from Cybersecurity Risk perspective.
• Promoted from IC to Lead the GRC (Governance Risk & Compliance) Pillar at Deloitte USI, providing senior management updates and overseeing people management.
• Consult and provide advisory on wider Deloitte UK and Global projects on Risk, providing risk view & assessments e.g. how new tools are implemented to support risk, global standard reviews.
• Involved in hiring, taking interviews and support management in leading the Graduate Training Program.
• Manages and own the Power user rights, blocked cloud applications and USB restrictions standard requests.
• Escalate non-conformities to the ITS Risk & Compliance Manager and identify areas for improvement.
• Regularly liaise with Compliance Leads to track and report on the progress towards compliance, mitigations of non-conformities, and remediation actions.
• Utilizing AI tools like ChatGPT (Pair D, Sidekick) keeping in mind Deloitte usage guidelines to increase the Team work productivity, enhancements & improving time – efficiency.

• Supported the implementation and testing of the NCN (Risk Management Tool) workflow.
• Managed global ISO 27001 audits, tracking and closing findings, and presenting KPIs and compliance updates to stakeholders.
• Maintained trackers, created action plans, and coordinated calls with global stakeholders to assess NC risks based on ERM impact.
• Served as Quality Assurance for information security risks, collaborating with the 1st Line of Defense team to mitigate risks.
• Collaborated with global ISOs and regional teams on the pilot testing and implementation of data labeling through the MIP Project (Microsoft Information Protection).
• Led the migration of regional mailboxes to a global mailbox, providing risk advisory on information security, policies, data protection, and social engineering.
• Worked with Global Information Security Officers on projects like Brilliant at the Basics compliance, RCSA, Confluence site maintenance, and communication plans addressing security risks and business requirements.

• An astute professional, worked 2 years in Banking and Financial project provide support in maintaining the infrastructure Services and compliance management.
• Performing Service quality surveillance and alarm handling for SQL, Windows servers.
• Handling Service Maintenance, executing system changes, Change Request and Report.
• Monitoring the smooth functioning of the applications and RDC servers through SST tool.
• Perform Scheduling the maintenance activities for Networking Devices through Autosys tool.
• Performed check on all the alerts and troubleshoot them on SST Citibank monitoring tool.

• Installed and configured Windows operating systems (role based) in the network as required

• Monitored the servers and scripts regularly and performed troubleshooting steps

• Resolved issues and queries of clients through calls.