Akash Malhan, CISA

- Led the design, implementation, and scaling of enterprise compliance programs within big-tech environments, covering SOX, PCI-DSS, GDPR, ISO, and NIST frameworks. - Built and managed high-performing compliance and assurance teams, providing strategic direction, coaching, and execution oversight across multiple workstreams. - Partnered closely with engineering teams to translate regulatory requirements into scalable, automated controls and evidence-generation mechanisms. - Identified and implemented automation opportunities across control operations and control testing, improving efficiency, consistency, and audit readiness. - Operated across all three lines of defense, aligning risk management, compliance execution, and assurance activities to enterprise governance objectives. - Served as a key advisor to senior stakeholders by communicating risk posture, compliance maturity, and remediation strategies in a clear, business-focused manner.

Internal Audit ― Led IT audits over General IT Controls (User Access, Segregation of Duties, Change Management (CM), etc.) for Linear Ad Sales, Digital Ad Sales, and Contract Management & Royalty Reporting Systems. ― Assessed clients’ IT general controls for program development, user access, and change control. Provided client management with the results of the assessment including identified risks and recommendations. ― Revamped CM and Access Mgmt. controls to remediate material weaknesses for a financial services client. Created, help implemented and monitored the controls to ensure remediation of the MW. ― Conducted specialized cyber security audits. Created risk controls matrixes for the Disaster Recovery and Vulnerability Management spaces (leveraging the ISO frameworks), tested the controls, and created a roadmap to remediate any observations found. ― Led specialized Open Source Software Governance audit. Created risk controls matrixes for the OSS space based on risks identified, tested the controls, and created a roadmap to remediate any observations found. IT Systems Implementation ― Developed business process flow diagrams and functional/technical requirements for a major government organization to assist in their procurement of a premium billing, customer enrollment, and financial management system. ― Organized and managed various aspects of the program management office, including developing approaches and plans for communications, issues and risk management, knowledge management, and budget reporting for a multiyear project at a utility company ― Served as PM over system design, functional requirements, configuration, testing, and implementation for a multiple commodity plant maintenance implementation that integrated with a SAP. Responsible for the overall system design, configuration, and testing as well as project management. In addition, worked with the client to understand the software data model and the different approaches to interfacing.

• Coordinates with business units and Information Technology regarding IT systems development, modifications and enhancements • Leverages the IT Product Lifecycle to manage traceability of requirements through Implementation • Collaborates with IT and business units in developing operational process flows and business logic rules to support operational needs and prioritize development work • Coordinates software testing and training sessions with business units to gain approval for project deployment • Develops training materials and documentation • Provides technical direction and support for computer systems development, testing, and training; experience supporting various SAP-PM applications including: • I105 – GIS to SAP Asset Synchronization; provided support for establishing technical, non-functional requirements, developed and executed system and UAT test sets, assisted with implementation activities including data analysis on Manual Synchronization efforts, provide post implementation Storm support by generating and issuing an interface status report to business units and project team. • E105 – Maintenance Plan Automation; provided support in developing business requirements as well as technical solution specifications, collaborated with SMEs and IT teams to document as-is and to-be processes, developed and executed system and UAT test sets, assisted with implementation activities including Maintenance Plan creation and data cleanup efforts. • E125 – Automation of Pathing Inspections - provided support in developing business and technical requirements, collaborated with SMEs and IT teams to document as-is and to-be processes, developed and executed system and UAT test sets

• Discharged patients from Same-Day Surgery • Transported patients throughout the hospital • Completed the two week “Nurse Camp” training • Shadowed doctors in the Emergency Room

• Collaborated with colleagues to synthesize PSA inhibitor for treatment of prostate cancer • Acquired experience on operation of Nuclear Magnetic Resonance (NMR) • Obtained basic information on conductance of Infrared Spectroscopy (IR) • Learned basic knowledge on operation of Gas Chromatography-Mass Spectrometry (GC/MS) • Utilized advanced lab techniques on a daily basis

National University is designated as a Center of Academic Excellence (CAE) in Cyber Defense Education by the National Security Agency (NSA) and the Department of Homeland Security (DHS).