Summary
Overview
Work History
Education
Skills
Experience Highlights
Certification
Professional Membership
Timeline
Generic

Raina Mukherjee

Hoboken,USA

Summary

Experienced global Technology and Cyber leader advising US and foreign corporations in successful execution of projects through managing stakeholders across different levels, collaborating with cross-functional leaders, building high performance teams, and deploying effective GTM strategies using data driven, actionable insights. Management consulting experience with expertise in developing and executing vision, strategy, programs, merger and acquisitions, due diligence, technology enablement, and risk management. Focus on workplace improvement and recruitment, mentoring and coaching. Results-driven [Job Title] with forward-thinking approach centered on company success and competitive growth. Demonstrated record of success in building successful teams and managing profitable operations.

Overview

13
13
years of professional experience
1
1
Certification

Work History

Senior Vice President, Technology Cyber Compliance Operational Risk Office

Citi Bank
07.2022 - Current
  • Check and challenge on the implementation Risk transformation, strategy, and governance (consent order)
  • Establishing the Management Office for program management and governance over the enterprise-wide Capability Maturity Assessment using CMMI benchmarking against Tech - COBIT and Cyber - CRI framework (OCC) (MRA deliverable)
  • Led Capability Maturity Assessment for Configuration Management, managing a team of 10 people.
  • Provide leadership to the Second Line influence and challenge of enterprise technology/cyber architecture and engineering programs including Enterprise Architecture, SDLC, Emerging Technology, Third party, SaaS
  • Experience conducting security assessments and developing baseline security recommendations and remediation strategies
  • Strengthened relationships with key stakeholders, fostering trust and collaboration across the organization.
  • Implemented comprehensive risk management frameworks, mitigating potential threats to the business and ensuring long-term stability.
  • Upgraded technology infrastructure for improved data security and streamlined workflow processes, increasing overall productivity levels within the organization.
  • Enhanced company performance by implementing new strategies and streamlining operations.
  • Presented and discussed strategy and initiative progress with senior business leaders.
  • Demonstrated proficient leadership skills to motivate employees and build competent teams.
  • Monitored industry trends, keeping current on latest changes and competition in industry.

Manager - Senior Manager Business Consulting

EY US LLP
07.2018 - 06.2022
  • Develop and implement multi-year roadmap for enterprise-wide cyber transformation programs
  • Performed multiple cyber program assessments as a subject matter advisor based on FFIEC, NIST CSF, and NYDFS, leading to development of a prioritized cyber remediation roadmap and strategy resulting in demonstrable maturity enhancement
  • Technology and Cyber Subject Matter Expert in an M&A environment, leading M&A activities and/or projects across wealth/asset management, insurance and financial institutions
  • Led collaborations with internal senior stakeholders, including global SVPs and CISOs, to understand existing internal capabilities and build future roadmap for technology
  • Lead technology enablement initiatives to support automation and data analytics ecosystem by combining in-depth domain expertise, multi-disciplinary teams, and intelligent tools
  • Advised on a range of banking and supervisory matters including corporate governance, heightened standards compliance, strategic planning, and consent order remediation
  • Assisted large financial institutions with quality assurance reviews and remediation of cyber risk management MRA identified by the US regulators (FBA and OCC)
  • Managed heavy revenue in the cyber, technology and business areas that had an impact to growing the practice steadily
  • Participated in Business Development to develop and maintain contact with top decision makers at key clients, organize and lead pursuit teams, participate and lead aspects of the proposal development process, contribute to the development of proposal pricing strategies at EY.
  • Improved productivity while reducing staffing and operational costs by 50%.

Manager, Business Consulting

EY India LLP
09.2014 - 06.2018
  • Assisted large corporations/financial services institutions with technology and cyber security projects:
  • Establish risk profiles, risk appetite and control library for several leading financial institutions to comply with enterprise policies and industry regulations to manage technology and cyber risk effectively
  • Performed security risk review for technology domains such as cybersecurity, information security, data security, threat and vulnerability management, infrastructure, and cloud security
  • Worked to bring business, data analytics and control testing experience together, to develop a strategy and operationalize it as part of a business solution.
  • Optimized resource allocation by conducting regular performance evaluations and providing personalized coaching for staff development.
  • Cultivated partnerships with external stakeholders to maximize business opportunities and extend network reach within the industry sector.
  • Facilitated successful cross-functional collaborations for the completion of key projects, fostering strong working relationships among team members.

Consultant, Enterprise Risk Services

Deloitte TTIPL
02.2013 - 09.2014
  • Third party security assessor at State Data Centers, responsible for conducting reviews based on ISO 27001 and 'Information Security in SDCs' guidelines provided by Government of India
  • PCI & PA-DSS consulting, implementation, and knowledge sessions for a financial services firm
  • Assessments based on NIST SP800-53 and benchmark analysis of the client's policies against the NIST

Consultant, Managed Services

Control Case
01.2012 - 02.2013
  • Developed checklist, training program and procedure documents for a bank in Middle East
  • PCI-DSS onsite certification audits in Vietnam, and Philippines
  • Remediation support for achieving compliance to PCI-DSS for clients in India, Middle East, Vietnam, and Philippines
  • Designed tailored training programs for employees at various levels within the organization, boosting overall skillsets.
  • Delivered outstanding service to clients to maintain and extend relationship for future business opportunities.

Consultant, Security

Network Security Solutions
01.2011 - 01.2012
  • Performed vulnerability assessment and report non-compliance
  • Conducted data privacy review for analyzing sources of data leakage for a leading government insurance firm in India
  • Supported third party vendor security program to measure compliance status and risks
  • Facilitated workshops with stakeholder groups to gain consensus on priorities and approaches for tackling identified issues or opportunities.

Education

Master of Science -

Symbios Internation University
India
04.2011

Bachelor of Computer Applications -

Symbiosis International University
India
04.2009

Skills

  • Digital Transformation
  • Risk Management
  • Mergers and Acquisitions
  • Regulatory Compliance
  • Strategic Leadership
  • IT Management
  • Project Management

Experience Highlights

  • Technology and cyber due diligence for Goldman Sachs when acquiring Folio Financial, Inc. a boutique wealth management custodian and technology company. Worked with various line of businesses to drive risk-based decisioning and integration of technology post-merger as well
  • Cyber Security Maturity Assessments and Benchmarking to peer institutions for multiple insurance firms to drive operating model, business and security strategy uplifts
  • Proven experience in prioritizing, influencing, and driving remediation and risk reduction strategies in various risk Technology, Third-party and Cyber risk stripe
  • Providing program management, oversight and quality assurance as a part of the Methodology/Management office for Technology and Cyber Capability Maturity Assessment Programs (MRA deliverable) performed by Enterprise and business at Citi
  • Supported EY Leadership to devise innovative solutions, develop go-to-market strategies, conducting functional and non-functional working sessions to develop future state operating model for the Cyber and Tech risk practice at the firm
  • Technology and Cyber Operational Risk Review for the newly designed CI/CD Platform for adherence to external regulations and internal Citi Bank policies and procedures

Certification

• Certified Data Privacy Solutions Engineer, ISACA

• Certified Information Systems Auditor, ISACA

• Mitigating M&A Cybersecurity Risks, EC-Council (on-going)

• Certified Blockchain Security Expert (on-going)

• Certified in Risk and Information Systems Control (Boot camp completed)

• Board Readiness Course, Athena Alliance (Commencing in Jan 2024)



Professional Membership

  • Athena Alliance
  • ISACA
  • 101 Blockchain Community
  • Cyber Risk Institute (CRI)

Timeline

Senior Vice President, Technology Cyber Compliance Operational Risk Office

Citi Bank
07.2022 - Current

Manager - Senior Manager Business Consulting

EY US LLP
07.2018 - 06.2022

Manager, Business Consulting

EY India LLP
09.2014 - 06.2018

Consultant, Enterprise Risk Services

Deloitte TTIPL
02.2013 - 09.2014

Consultant, Managed Services

Control Case
01.2012 - 02.2013

Consultant, Security

Network Security Solutions
01.2011 - 01.2012

Master of Science -

Symbios Internation University

Bachelor of Computer Applications -

Symbiosis International University
Raina Mukherjee