MILKY MODI

Business Analysis – Elicited business requirements for core IT system in pension & tax savings product portfolio. Created high/low-level design, functional specifications, user interface specifications, acceptance criteria, process workflows, logical and technical data model. Tool set: Erwin data modeler, iGrafix Flow Charter • Developed and implemented core IT system using Greenfield approach with over 75+ functionalities supporting mainframe batch processing, back-end services supporting BPM/PeopleSoft user interface, Information & Insight, Customer and back-office reporting. Tool set: IBM mainframe (z/OS), COBOL, DB2, IMS, JCL, Tivoli job scheduler, Telon, ISPW, RACF, SQL performance analyser, webservices, Expeditor, IBM/BMC/CA/DB2 utilities • SWOT analysis – Identified Strengths, Weakness, Opportunities, Threats of IT landscape for Core banking and utilizing for matching & converting for continues improvement. Recognized as a best practice & lead example for managing stakeholders’ expectations across entire IT organization • Cost optimization – Reduced run-the-bank cost of core systems by 6 figures (in EUR/year) in less than 6 months through cost reduction initiatives. Key activities – IT cost analysis, exploiting IBM ZIIP/ZAAP processor, DB2/SQL tuning, peak-load analysis, batch & storage (DASD) optimization, eliminate anti-patterns by job scheduler tuning • Enforcing IT controls – Saved one-third of project build cost by uncovering high defect density (as high as 30) through code and 1 st level application control review • Cost estimations – Accessing software sizing with 90% estimation accuracy using Function Point Analysis (estimated 2000+ FP) and Work Breakdown Structure (estimated 3000+ hours)

Conduct and lead assurance assignments in accordance with annual IT audit plan focusing on strategic, operational and regulatory risks thereby evaluating quality and effectiveness of Governance, Risk and internal Control (GRC) framework of various Business lines at local/regional levels in Asia Pacific region • Conduct day-to-day audit execution activities (request information, walkthroughs, lead meetings, review IT policies/procedures/SOP, test ITGC) in accordance with defined audit objectives, scope and timelines • Based on GRC evaluation, prepare clear and concise IT engagement deliverables (findings, recommendations, audit reports, memos, presentations) with factual evidences for audit stakeholders and agree on management action plan for remediation of reported gaps • Perform continuous follow-up on audit findings to evaluate management’s assertion of completeness and adequacy of risk remediation actions • Conduct annual risk assessment to ensure changes in technology risk profiles are timely reflected in audit plan • Leverage data analytics tools to create re-usable investigation use-cases for internal audit community • Demonstrated strong results by identifying key risk areas (thereby issued highest number of findings within Internal Audit department in 2019) in IT Governance (strategy, steering, roles & responsibilities), 3 rd party vendor & SLA management, IT infrastructure, Identity & Access management, Procurement, IT Outsourcing, Application security, incident/change/problem management, Data Governance & Security, Regulatory risks, Data Loss Prevention, Cloud infrastructure (IaaS/PaaS/SaaS), evaluating IT controls for 1st and 2nd LoD