Madhusree Nag

Background

About Madhusree Nag

Who am I?I’m a Cybersecurity & Risk Management Professional with 7+ years across the 1st, 2nd & 3rd Lines of Defense, making sure the business doesn’t stumble over its own risks. I keep Senior Management and Business Leaders aware of their Risk Posture. As they say, “Risk knows no boundaries,” and trust me, my workday rarely has a dull moment!Career Snapshot:DWS Group – 1st LoD: Manage security findings, KPIs/KRIs reviews, and Risk & Control Assessments.HCL Technologies & Deloitte USI – 2nd LoD: Focused on Risk Reporting, Risk Communication, and Risk Escalation, leveraging dashboards and data visualization for governance and visibility.BYJU’S – 3rd LoD: Conducted daily audits and contributed to ISO 9001 feasibility assessments, improving operational efficiency.Professional Highlights / Key Accomplishments:• At DWS Group, I lead end-to-end lifecycle management of security findings at Deutsche Bank, ensuring alignment with policies and regulatory expectations.• Conduct Risk & Control Assessments (RCAs) to evaluate control effectiveness, identify gaps, and highlight breaches against risk appetite thresholds.• Strengthen control culture through guidance, analysis, and escalation of key risk issues.• Partner with business leads to review KPIs & KRIs monthly, consolidating insights into leadership reports for informed, timely decision-making.• At HCL & Deloitte USI, implemented dashboard-driven governance and reporting, enabling real-time tracking of risk trends, improving visibility, accountability, and decision-making.• At BYJU’S, conducted daily internal audits, built dashboards to track product movement and anomalies; contributed to early-stage ISO 9001 assessments; drove a 17% reduction in trapped capital.Certifications: CISM (Q), CRISC (Q), CCSP (Q), ISO/IEC 27001, 42001, 23894, 9001Frameworks & Standards: ISO/IEC 27001, 42001, 23894, 9001, NIST, COBIT 2019, GDPR, KAIT, DORANext Step: I am looking to transition into more senior roles where I can continue contributing to enterprise-wide risk strategy, strengthen governance initiatives, and support resilient cybersecurity cultures.Let’s Connect! Please feel free to reach out for discussions, collaborations, or opportunities in information security and risk management.Thank you for your time.