Cybersecurity
Governance: Structure & policy reviews
Maturity: Security baseline capability
ISO 27001: End-to-end audit readiness
Awareness: Executive security workshops
AUDIT
GOVERNANCE
RISK
COMPLIANCE
ASSURANCE
Sushil Zanwar
CISA | ISO 27001 & 42001 Lead Auditor | Internal Audit | Tech Risk
Leader | AI Governance, Cybersecurity & Regulatory Compliance
(DPDPA/GDPR) | Netowrk Security & Cybersecurity Expert
Enabling secure, compliant and future-ready organizations through risk-based strategies, responsible AI frameworks and robust governance.
ANALYZE
SECURE
COMPLY
INNOVATE
LEAD
17+
YEARS EXPERIENCE
CISA
CERTIFIED
ISO 27001 LA
LEAD AUDITOR
ISO 42001 LA
LEAD AUDITOR
DPDPA
PROFESSIONAL
PROFILE
About Me
Strategic Governance, Risk & Assurance, Data Privacy & Security, Cybersecurity, Audit professional with 17+ years of experience.
Extensive experience in enterprise risk management, information security governance, regulatory compliance, DPDPA 2023, GDPR, ISO 27001, ISO 42001, TPRM, technology audit, AI Security and AI Governance Audits.
Partnered with global tech leaders and financial institutions to strengthen their governance across critical risk domains. I bring deep domain depth and adaptability across Banking & Financial Services, the Insurance Sector, Education Institutions, and NGOs & Non-Profits.
01
MISSION
"My core mission is to empower enterprise boards and executive leadership to manage technology risks, assure AI governance, and achieve regulatory compliance."
02
VISION
Enabling organizations to embrace technology with confidence — balancing security, governance, privacy, and responsible innovation to build a resilient future
Enterprise
Footprint
ION Group
Kotak Bank
UBS
Cognizant
TCS
Wipro
CORE CAPABILITIES
Areas of Expertise
Audit & Assurance
ITGC Reviews: General control evaluation
Internal Audit: IT risk focused reviews
Cyber Audit: Threat posture validation
Vendor Risk: Third-party risk assurance
AI Governance
ISO 42001: Management system setup
AI Risk Reviews: Model & data risk checks
Responsible AI: Ethics & bias controls
Frameworks: NIST AI RMF alignment
Data Privacy
DPDPA Readiness: Indian privacy act strategy
GDPR Compliance: Global data privacy
Privacy Risk: DPIA & impact assessments
Control Reviews: Data life-cycle checks
VALUE PROPOSITION
Why Engage Me?
Years Experience
Deep domain depth across banking, financial services, and global tech leaders.
Practitioner + Auditor
Hands-on security background combined with executive audit experience.
Regulatory Mastery
Expert guidance on RBI, DPDPA, GDPR, PCI-DSS, and global ISO standard frameworks.
Emerging Tech Focus
Pioneering capability in ISO 42001 AI governance and responsible AI assurance.
Executive Reporting
Board-ready reporting leveraging Power BI and Tableau visualization metrics.
PROFESSIONAL CREDENTIALS
Certifications & Achievements
CISA
ISACA Certified
ISO 27001 LA
Lead Auditor
ISO 42001 LA
AI Lead Auditor
DPDPA Professional
Privacy Expert
Advanced AI Auditing
ISACA Specialty
INDUSTRY AWARD RECOGNITION
Emerging Leader – Compliance & Risk Pioneer
Recognized for excellence in technology risk management and AI governance adoption.
EXPERIENCE
01
Senior Lead Auditor – Internal Audit
ION Group
Lead strategic risk advisory, DPDPA and privacy compliance initiatives, technology assurance and governance activities.
Spearhead AI Security & Governance Audits, evaluating model lifecycles, explainability, risk management and ISO/IEC 42001 alignment.
02
Deputy Vice President – Internal Audit
Kotak Mahindra Bank
Led multiple IT, Cyber Security, Network Security, BCM/DR, Third-Party Vendor, and IT Application audits, including gap assessments against RBI, DPDP, PCI-DSS, and other regulatory guidelines.
Led a 5-member audit team across planning, walkthroughs, risk assessments, reporting, and RBI submissions, while contributing to RBI regulatory initiatives and BCM/DR drills.
03
Audit Expert
UBS
Spearheaded IT Infrastructure and Cyber Security Audits for a bank, covering audit planning, risk assessment, control testing, regulatory compliance, and reporting.
Reviewed key security controls, firewall rules, traffic, and proxy configurations to identify control gaps, anomalies, and security risks.
04
EARLIER PROFESSIONAL EXPERIENCE
Technology, Infrastructure & Security Foundation
Built a strong foundation across technology infrastructure, network security, information security and enterprise technology operations, with experience spanning ITGC and internal controls, network deployment and modernization, firewall and security administration, vulnerability remediation, infrastructure governance, disaster recovery and technology support.
Cognizant Technologies Solutions
Tata Consultancy Services
SunGard IT Availability
Titan Technologies
Wipro Limited
THOUGHT LEADERSHIP
Leadership & Impact
Privacy Implementation
Privacy implementation programs for Kotak Mahindra Bank.
Cybersecurity Awareness
Cybersecurity awareness sessions for Mahesh Sahakari Bank Ltd. & Mahesh Professional Forum.
AI Governance
AI Governance and Security Audits covering model lifecycle, explainability, risk and responsible AI.
Regulatory Readiness
Supporting organizations with governance, privacy and regulatory readiness.
VALUE PROPOSITION
Secure. Compliant.
Secure. Compliant.
Future-Ready.
01
Strategic
Risk-based strategies aligned with organizational objectives.
02
Practical
Actionable governance and assurance approaches designed for real-world environments.
03
Future-Ready
Responsible AI, privacy and security frameworks designed for evolving regulatory expectations.
CORE DIFFERENTIATOR
AI Governance & Risk Assurance
ISO 42001 Readiness Reviews
Gap analysis and roadmap for AI Management System certification.
AI Risk Framework Implementation
Alignment with NIST AI Risk Management Framework (NIST AI RMF).
Responsible AI & Audit Programs
Ethics controls, model risk assessments, and executive awareness.
CLIENT VALUE PROPOSITION
"Adopt AI confidently while managing governance, compliance, and risk."
FEEDBACK
What Clients Appreciate
"The cybersecurity awareness session was practical, engaging, and highly relevant to banking operations. Complex cybersecurity concepts were explained in a simple and actionable manner."
"Strong understanding of regulatory expectations, technology risks, and governance frameworks. Audit recommendations were realistic and helped strengthen our control environment."
"Excellent blend of technical expertise, compliance knowledge, and business understanding. The session provided valuable insights into AI governance and cybersecurity risks."
COLLABORATION
Engagement Models & Offerings
Flexible Consulting Models
Project-Based: Targeted risk assessments, audits, and gap reviews.
Retainer Model: Ongoing monthly advisory, audit, & risk support.
Training Model: Custom workshops & awareness programs.
Sample Engagement Menu
LET'S CONNECT
Start a Conversation
QUICK ID
NAME
Sushil Zanwar
EMAIL
sushil.zanwar@gmail.com
PHONE
+91-8806633133
LINKEDIN
linkedin.com/in/sushilzanwar
Strategic Assurance & Risk Advisory