Pragati Bhargava

• Led the design and rollout of a new operational risk taxonomy and control assessment framework, standardizing risk reporting and reducing key risk data collection time by 30%. • Acted as the primary risk advisor to the Digital Business unit for major product launches, conducting pre-implementation reviews that identified and mitigated 15+ potential process failures • Managed the design and execution of information security programs, including policy development aligned with global standards and frameworks. • Lead enterprise-wide Risk and Control Self-Assessments (RCSA) for individual and group life insurance, driving internal control testing and remediation plans that enhanced first-line defense (Line 1B) effectiveness. • Designed and deployed operational quality assurance frameworks and guidelines, improving regulatory and compliance adherence while increasing process efficiency by 15% • Partnered with compliance, risk, and internal audit teams to assess control adequacy, align with global and local regulations, and implement sustainable process improvements across operations. • Performed cyber security audits to identify control gaps against ISO, NIST-CSF, and sector-specific regulations, such as RBI, SEBI, and CSCRF. • Partnered with IT and business leadership to ensure ownership of risk accountabilities and embedding of risk culture across divisions. • Developed and maintained comprehensive IT control libraries, ensuring controls were effective, efficient, and risk-aligned. • Championed information security awareness initiatives, including training sessions for senior management and staff. • Assisted multiple clients in the design and development of ISMS policies and processes against ISO 27001, performing security risk assessments, implementing security controls, performing internal audits, and managing external certification audits.

• Led multiple information security and data privacy projects across various sectors, including banking, pharmaceuticals, and telecom, ensuring compliance with global regulations and organizational standards. • Conducted comprehensive testing of IT General Controls and IT Application Controls to ensure the effectiveness and reliability of information systems. • Developed and implemented data protection policies and frameworks to strengthen organizational cyber posture. • Collaborated with cross-functional teams to embed security principles into business operations. • Developed risk register reports and corresponding treatment plans for key processes to identify and mitigate risks in alignment with ISO 27001 and ISO 27701 standards. • Implemented ISO 27001 and ISO 27701 standards at public and private sector banks in India.

Project Responsibilities Project 1 (India's largest telecom) : - Supporting Chief Compliance Officer for Data Privacy across the organization - Leading a team of 11 members across locations - Conducting DPIA's of all the consumer-related IT applications - Conducting process review for the entire organization - Reviewing the privacy program across the circles - Conducting various training & awareness sessions across the organization at different locations - Implementing privacy-by-design for all the IT changes - Supporting legal team for privacy agreements Organization Responsibilities - Creating proposals for various clients - Solution design for RFP's - Training sessions for various team members - Tool analysis for privacy implementation - Supporting various projects as a privacy SME

• Understanding and creating collateral's for California Consumer Privacy Act(CCPA) • Creating Go To Market Strategy for CCPA Consulting, Analyzing CCPA requirements, market size and Target Market • Creating CCPA Offerings and collaterals including Assessment Forms, Audit Checklists • Creating Re-Usable data assessment frameworks, Data Flow Diagrams (Organization and Application Level), Records of processing templates and for documentation • PoC for customers & amending consulting offering to meet market demands, customer presentation and workshops • Prepared Recommendations to close gaps using Process / Technology • Strategize and create marketing plans designed to generate leads, maximize conversion rate and generate demand among prospects and existing clients • Sales and marketing collaterals - Creation of market-ready collaterals, artifacts and sales enablers such as capability presentations/ documents, brochures and videos to support sales and marketing objectives.

• Established collateral for CCPA implementation and compliance. • Conducted analysis of CCPA requirements alongside market size and target demographics. • Conducted CCPA assessments for multiple pharma companies • Developed modular data assessment frameworks, including application-level data flow diagrams and processing documentation.

Project 1: • Conducted an Assessment on As-Is-State of a Digital Platform for a Healthcare Company based out of Basel • Helped them create a roadmap and implementation guideline with multiple SoP’s to be GDPR Compliant Project 2 • Created a PoC for capturing the Personal Data of an Airline Company based out of Norway • Reviewed them on screen interface & gave them insights about cookies, consent, data minimization & data capture Project 2: • Created Poc for IT Implementation related to Rights of Data Subjects • Drafted a guideline document how will the rights of Data Subjects be implemented in their IM System Project 3: Banking (Compliance Analyst) • Conducted an Assessment for TDM related activities with respect to GDPR • Assessment report was presented to Client Directors and Client Partners highlighting the Gaps related to TDM Project 4: • Conducted interview of 150 + Application Managers & Senior Director to identify Data Flow & Rights of Data Subjects which are not addressed in the application • Derived the results and published the report to Organization’s Leadership, highlighting Gaps and Recommendations. Project 5: • Conducted an Assessment for Project, took a sample of 2 Applications which has GDPR defined Personal & Sensitive Data, Gaps related to GDPR focus Area & Sub-Focus Area were identified • Prepared an Assessment Report highlighting the Gaps & Recommendations and published to Leadership & Client • Worked with Leadership to identify key business objectives & formulate strategies for FY’19 based on them. • Geo expansion plan: Analyzed & recommended viable business investments for FY’19, based on the research study performed for expanding Process & Quality Consulting to CIO Advisory • Competitor analysis: Conducted study of competitor footprint in the CIO Advisory space, providing insights for growth

• Worked as SAP ABAP technical & Functional consultant for Australian utility giant. • Responsible for enhancing, developing & maintaining the SAP system for client’s CSR activities while storing all client & sales data. • Played a pivotal role in client requirement analysis, solution design & implementation for designing mobile application of client functionally and linking it with the SAP system • Worked with cross functional teams solutions – FICO & Billing, implemented change requests. • Efficiency achieved: 20 Man hours per month saved. Conducted Solution & framework definition for client requirements while being involved in functional & technical discussions. • Headed Quality Assurance & Knowledge management of my module with three assistant software engineers, was responsible for all defect count & knowledge repository. • Worked in Client Service team, exhibiting Accenture’s working model of SDLC to clients. • People Management: Mentored & managed a sub-team of four associates.