sonika bidyasar

• Built the risk management and information security function from the ground up, giving leadership visibility into
enterprise risk for the first time in the organizations history.
• Directed ISO 27001 audit readiness and enterprise risk assessments, aligning security priorities with business growth
plans instead of running compliance as a standalone exercise.
• Managed information security initiatives across product, technology, business and external vendor teams, ensuring
every risk decision was made with full business context.
• Led GDPR and SOC 2 readiness programs with compliance and audit partners, strengthening enterprise customer
trust and supporting revenue growth.
• Built governance dashboards, KRIs, KPIs and RACI models that gave leadership a clear, data backed view of risk
posture and remediation progress.
• Partnered with Customer Success and Product teams to resolve customer security concerns, positioning security as a
business enabler rather than a blocker.

• Owned enterprise incident management, technology risk, control testing and remediation programs, resolving issues
with business impact in mind rather than closing them for the sake of a metric.
• Led new tooling POC and project management responsibilities from Planning, budgeting, vendor coordination,
requirements review till the migration from Archer to Microsoft Dynamics 365 as part of digital transformation &
modernizing the firms risk technology platform.
• Introduced workflow automation that enabled automatic closure of 20 percent of low-risk incidents, freeing analyst
capacity for higher value risk work.
• Oversaw risk registers, exception management and governance reporting through ServiceNow, giving stakeholders
real time visibility into control health ensuring over 90% on time compliance.
• Conducted risk assessments and control effectiveness reviews across technology and security functions, turning
findings into business relevant action plans.
• Redesigned processes and governance routines that improved operational efficiency across the wider risk
organization. Example: AI Governance for Co-pilot Implementation.

• Owned vulnerability governance and remediation oversight for approximately 800 business critical applications,
prioritizing based on business risk rather than technical severity alone.
• Led global simulated phishing campaigns across APAC, EMEA and North America, reducing click rates from roughly 30
percent to below 5 percent through targeted, data driven awareness programs.
• Established a Reporting Center of Excellence supporting ServiceNow and technology operations, becoming the
trusted source for executive risk reporting for CIO and CTO levels.
• Built executive dashboards using Power BI and Tableau that turned raw risk data into decisions leadership could act
on.
• Delivered VBA macro automation that cut data quality assurance effort from 400 to 40-man hours per month, a 90
percent reduction in manual effort.
• Supported business continuity planning, data loss prevention, e discovery governance and technology risk programs
across the enterprise.
• Acted as business analyst for e discovery initiatives, driving process improvements and quality enhancements.

• Performed end to end testing, smoke testing, requirements analysis and release validation, including Selenium based
automation.
• Supported SDLC activities, production deployments, defect management and business requirement reviews.