Mahalakshmi has over 9 years of experience as an IT and Information Security Audit Manager. She has a Bachelor's degree in Information Technology and holds certifications including CISA, CISSP, Six Sigma Green Belt, and ALMI. Currently she works as an Audit Manager at Westpac Group, where her responsibilities include performing independent reviews and evaluations to assist management in developing and maintaining effective control frameworks. Previously she worked as a Senior IT Auditor at Allianz Australia and held various roles such as Information Security Manager and Audit and Compliance Manager at Tata Consultancy Services.

1. MM AA HH AA LL AA KK SS HH MM II .. SS
Artarmon,NSW 2064  Phone: 0452262305  nila2223@gmail.com
Personal Profile
IT & Information Security (IS) Audit Manager whose qualifications include Bachelor’s degree in Information
Technology; with CISA and CISSP designation; and detailed knowledge of security standards, procedures and
best practices. Nine years of experience in Auditing IS systems, deployment of quality and information security
policies, procedures and controls for diverse groups in the organization. Experience working with diverse
national clients (US, UK, Australia) and currently associated with Allianz Australia.
Education & Certifications
 Bachelor of Technology in Information Technology, 2005 (87%) Anna University, India.
 Six Sigma Green Belt, 2009
 Associate, Life Management Institute (ALMI),2012
 Certified Information Systems Auditor (CISA), 2012 (III Rank Holder in Chennai)
 Certified Information Systems Security Professional (CISSP),2015
Skills & Systems
Standards and Frameworks ISO 27001:2013, 9001, 20000, COBIT, PCI-DSS, ITGC, CMMi, Six
Sigma
Domains Telecom, Insurance, Business Process Services
Networking LANs, WANs, VPNs, Routers, Firewalls, TCP/IP
Areas of Expertise Information Security (IS),
Audit & Compliance
Risk Management
Regulatory Compliance
Security control deployment
IS Incident Management
Process Improvement
Network & System Security
Training and Awareness
Inter group co-ordination
Report writing
Strong Verbal and Written Communication
Awards & Recognitions Best Performance Award
Best Auditor Award
Star of the Month – for planning and executing audit connect for 8000+
employees.
Best Faculty Award – for the continuous support in enterprise wide
learning and development programme
Power IT-Friend of the Month -for Support and Contribution
towards Energy Conservation at organization level.
On the Spot Awards – for excellence in knowledge sharing and
automation in the project, contribution and Support towards "Earth Hour"
and contribution and support in organization wide IS awareness
campaign.

2. Employment History
Westpac Group Jul 2016 - Present
Westpac Group is Australia’s one of the largest bank. Westpac Group's portfolio of financial services brands and
businesses is focused on a common purpose - delighting our nearly 13 million customers and helping them
achieve their financial goals..
Position Held Audit Manager, Technology
Key Responsibilities:
 Perform independent reviews, evaluations and advice that will assist management in exercising its
responsibility to develop, maintain, monitor, and continuously enhance control frameworks and
systems.
 Promote the development of a strong, effective and enduring risk management culture.
 Responsible for team leading a portfolio of assignments and contributing as a team member to their
reviews. Also assesses that these controls are operating effectively. The role provides visibility to the
Westpac Group Board Audit Committee (BAC), other Board Committees and Boards and/or Board
Audit Committees of Westpac’s prudentially- regulated wholly-owned subsidiaries. Also provides the
incumbent with exposure to senior and executive management, multiple divisions and activities
across the Westpac Group.
 Focus on assurance engagements in Westpac's Group Technology area, and include assessment of
both infrastructure and applications.
 Contribute to the development of the annual audit plan, Provide input into resource planning and
budgets.
 Maintain an understanding of major technology developments and risks and the impact to assurance
work undertaken
 Independently lead the planning and execution of assurance engagements
 Deliver assurance reviews in line with the GA methodology
 Act as an ambassador for GA throughout the audit process
 Prepare and deliver training presentations to audit teams, Guide and develop Senior Associates.
 Management of audit fieldwork including the monitoring of team member progress
 Accurately assess the materiality of audit issues
 Delivery of draft assurance report, Prepare draft quarterly reports for business portfolio outcomes
 Develop ongoing working relationships with the Business Heads and their teams
 Monitor incidents and events within portfolio.
Allianz Australia Aug-2014 – Jun 2016
Allianz Australia is one of Australia's largest general insurers, employs approximately 3,800 staff. They offer a
wide range of insurance and risk management products and services.
Position Held Senior IT Auditor
Key Responsibilities:
 Lead planned audits under the guidance of an Audit Manager, understand business area in scope for
review, including key business risks including technology risks and general IT control environment.
 Execute fieldwork activities in accordance with the audit work programs and in compliance with
internal audit standards. This includes documenting processes, identifying key controls and
performing audit testing of the design and operating effectiveness of the identified controls.
 Perform Audit planning, reporting and issues follow-up processes. Maintain all audit documentation
in audit system (Teammate).
 Provide assurance on business and IT controls; provide value adding business improvement
recommendations to the business, balancing risk mitigation and commercial considerations.

3.  Establish sound, strong ongoing business relationships while maintaining the independence required
from being in the 'third line of defense'.
 Assist in providing assurance on key strategic projects. This includes understanding the project
objectives and associated risks and providing varying degrees of assurance, depending on business
request, which would require clear understanding of stakeholder expectations
Tata Consultancy Services Ltd., Oct-2005 – Apr-2014
Tata Consultancy Services (TCS) is a global leader in IT services, digital and business solutions that partners with
its clients to simplify, strengthen and transform their businesses. TCS has been recognized by Brand Finance as
one of the Big 4 Global IT Services Brands.
Positions Held
Information Security Manager, 2012-2014
Key Responsibilities:
 Deployed IS Policies, Procedures & controls in line with ISO 27001:2005 and was also responsible for
deploying enterprise security strategies, safeguarding information assets and ensuring compliance
with regulatory mandates.
 Provided proposal responses and reviewed IT solution documents for new business.
 Performed IT control Review, risk assessment and Business Impact Analysis. Facilitated
implementation of risk mitigation strategies across business units.
 Evaluated critical system & implemented security processes, procedure and risk mitigation processes.
 Periodically reviewed asset register and risk management reports for the delivery/solution center.
 Facilitated and conducted external IT, IS and Regulatory audits.
 Ensured site compliance to ISO 27001:2005 standard.
 Periodically reviewed the process/site for Business Continuity Management & ensured tests/ drills are
conducted on time. Ensured employee adherence to stated guidelines and Contractual Obligations.
 Conducted compliance awareness workshops.
 Investigated IS related incidents and closed all investigations with proper corrective, preventive and
mitigating actions.
 Lead a special assignment for implementation and assurance of all ITGC controls across projects for
UK based utility service provider customer.
PCI-DSS Analyst, 2011-12
Key Responsibilities:
 Analysed PCI DSS (2.0) requirements of one of the major UK based insurance provider and
successfully implemented a Payment Portal solution using token management to ensure compliance
with PCI DSS.
 Lead the application and security testing team to ensure compliance with PCI as well as OWASP
requirements.
 Developed security testing documentation templates for the clients and implemented security
controls in all interfacing systems of the payment portal.
 Received 100% customer satisfaction index for the PCI DSS assignment performed on-site.
Audit and compliance Manager, 2010-2012
Key Responsibilities:
 Held the position of Audit and Compliance Manager for insurance unit of the organization and was
responsible for planning and execution of process, management function, security and support group
audits.

4.  Successfully coordinated and completed enterprise wide ISO 9001, 20000, 27001 renewal certification
audit.
 Performed trend analysis and audit effectiveness at unit level and suggested numerous value
additions for process improvement. Implemented many best practices to improve controls and audit
effectiveness across projects.
 As part of the role, planned and executed a grand campaign among 8000 associates to improve audit
awareness and effectiveness. Conducted events, seminars and contests around Quality and
Information security policies areas. The event was recognized as one of the best practice in ISO
external audit and received appreciation for the same from external auditor.
 Trained 500 + employees as internal auditors.
 Performed process mentor role for more than 50 associates and assisted them in pursuing Green Belt
in Six sigma. Executed many process improvement assignments and achieved cost savings for the
project. Conducted trainings to more than 100 batches in key areas like Defect Prevention, Decision
Analysis and Resolution, Internal Auditing, Six Sigma-Lean concepts, information Security awareness
CMMi Consultant & PPQA Analyst, 2007-2009
Key Responsibilities:
 Assisted one of the largest US based Insurance provider to successfully get CMMi L-3 certified.
 Defined and developed Policies and procedure documents for key CMMi process areas.
 Performed objective evaluation of all customer projects against CMMi requirements and co-ordinated
closure of identified gaps.
 Reviewed and approved all artefacts across the SDLC life cycle of projects. Published Dashboards on
audit readiness, status of projects and tracked all projects towards compliance.
 Proposed and Implemented process improvement tools and techniques in the project
 Conducted training sessions for the project managers to follow process and procedures as per CMMi
level 3.
 Prepared metrics Dashboards and summary reports to analyse the performance of projects in different
Process areas
Incident Management Lead, 2005-2007
Key Responsibilities:
 24*7 production support team, which required pro-activeness in solving the issues in compliance with
the Service Level Agreement. Provided direct exposure to clients, end users issues, business impacts
and criticalities. Provided a good understanding of business functionalities and all the systems and
applications involved.
 Automated various monitoring activities using Unix Shells scripts and supported around 18 applications
covering almost all interfaces to the telecom service provider.
 Continuously Monitored and fixed the issues arising in the production environment
 Co-ordinated and performed new production releases, Built and configured Tuxedo Servers as required
 Trained the team members on multiple applications and in production support activities
 Performed Internal Process activities of the team
Recommendations from Linked in
"I found Mahalakshmi to be a dynamic person. She is very good in doing whatever she has taken up. She is a
very good auditor, had won many best auditor awards. All the best for her future endeavours."
— Kumar Melmangalam, MFM, CISA,CISM, worked directly with Mahalakshmi at Tata Consultancy
Services
"A top CISA rank holder in ISACA Chennai Chapter Mahalakshmi, has always been thorough in concepts
of information security especially security audits. It was nice to work with her in BPS ISM group, let that be

5. discussion on Client risks, Security Quiz/crosswords designs etc. I wish a very bright future to her."
— Yogesh Pendhare, worked directly with Mahalakshmi at Tata Consultancy Services
"Mahalakshmi came into information security field out of her personal interest to exhale. She did learn fast
and was doing great! Wish her good luck Regards, Natarajan"
— Natarajan Swaminathan, managed Mahalakshmi indirectly at Tata Consultancy Services
"During my Security project a couple of years ago, when I was integrating OWASP based tests into project
life cycle testing, you provided excellent support whist leading the TCS test team. You proved very receptive,
quickly understood, and documented the security testing requirements. Your team subsequently performed
these tests over a series of iterations lasting several weeks, identifying a significant number of vulnerabilities
for remediation. This documentation, testing and remediation were of great importance to the success of the
project. Your important contribution was very much appreciated, as an example of first class professional
collaboration."
— Piers Tuson, worked with Mahalakshmi at Tata Consultancy Services
References
(Available on request)