Subhajit Bhuiya

PWC

Directed GRC Technology Transformation, Workflow & Reporting
Modernization initiatives.
Developed standardized tools and templates for departmental planning,
increasing operational excellence by 50% through a balanced approach of
people, culture, and technology.
Devised and implemented business strategies to align with organizational
objectives and ensure cost optimization.
Collaborated with senior leadership to define long-term goals and formulate
actionable plans.
Organized regular stakeholder meetings to review progress towards
strategic objectives and address challenges.
Led requirement gathering and process review for enterprise-wide GRC and
Security Operations initiatives, collaborating with over 15 cross-functional
teams to improve process standardization and transformation by 30% using
industry frameworks.
Managed GRC transformation programs end-to-end, achieving 95% on-time
milestone delivery and reducing implementation defects by 30%.
Transformed compliance and audit requirements into structured workflows,
shortening audit remediation timelines by 20% and improving control testing
accuracy by 40%.
Modernized the Risk Control Matrix (RCM) and integrated data governance
capabilities, enhancing assessment quality and reducing manual
reconciliation efforts by 30%.
Validated GRC solution designs and architecture reviews with cross
functional teams, ensuring 100% alignment with enterprise governance
standards and reducing rework by 15-20%.
Streamlined GRC processes to improve operational efficiency and
regulatory adherence, achieving a 20-25% reduction in compliance cycle
time.
Leveraged analytics and workflow insights to drive data-driven decisions,
improving business outcomes by 15-20% and mitigating operational
bottlenecks.
Maintained a comprehensive understanding of legal regulations impacting
the organizations operations.
Assessed emerging technologies and methodologies for potential
implementation to enhance productivity and reduce costs.
Guided cross-functional teams in designing and executing corporate
strategies through effective communication and collaboration.
Defined KPIs, KRIs, control libraries, and risk taxonomies, enabling
standardized assessments and improving reporting accuracy by 35-40%
across enterprise functions.
Developed training modules and documentation for staff enablement.

Established the Third Party Governance Framework and Operating Model,
driving Third Party Risk Management implementation and achieving 30%
operational efficiency gains across the program.
Performed in-depth risk and compliance data analysis to identify trends,
risks, and opportunities for innovation through technology platforms.
Oversaw complex GRC technology initiatives, managing project risks,
leadership communications, and escalations to deliver high-impact problem-
solving outcomes that improved enterprise-wide operational efficiency by
40%.
Led technology modernization for Audit & Compliance Solutions, enhancing
efficiency and reporting capabilities for executive decision-making.
Directed process optimization, automation, and transformation initiatives,
utilizing performance metrics and business insights to achieve 30%
measurable operational improvements and sustained efficiency gains.
Identified critical customer pain points and enhanced the end-to-end
customer journey through workflow automation, resulting in up to 50%
efficiency improvement and significantly enhanced service performance.
Defined Key Performance Indicators (KPIs) and Service Standards to
institutionalize operational excellence and strengthen performance
governance.
Utilized strong problem-solving skills and thought leadership to rapidly
resolve challenging issues, improving leadership reporting efficacy by 50%
through data-driven analytics.
Supported cross-functional teams in requirements gathering, user story
creation, and process flow mapping to design scalable, compliant, and
future-ready GRC solutions.
Ensured regulatory and audit readiness by validating control traceability,
documentation quality, and alignment with compliance and regulatory
standards.
Developed and managed the GRC TPRM & Privacy program, creating the
project plan, business case, and product roadmap for TPRM
implementation, while fostering strong cross-functional collaboration with the
Governance function.
Advised Executives on identifying strategic requirements and implementing
innovative solutions to support executive decision-making during
implementation.
Provided strategic guidance to senior management on enhancing
operational efficiency within the organizations architecture department.
Formulated product strategy and multi-year roadmaps to optimize costs,
strengthen governance, and accelerate enterprise compliance maturity.
Owned and managed enterprise-wide Risk Compliance Reporting
dashboards for leadership and regulatory reporting, enabling data-driven
decision-making through analytical insights.
Established robust cross-functional collaboration with Product Managers,
Sponsors, Business teams, and Implementation teams to achieve project
outcomes guided by well-defined KPIs and performance measures.
Led requirement gathering sessions with Executives, Sponsors,
Compliance, and Technology teams to define GRC workflows, assessments,
and reporting needs.
Managed multiple concurrent projects, ensuring all deadlines were met.
Enhanced assessment efficiency by 30% through the automation of risk
control matrices, workflows, and dashboards.
Partnered with IT, Legal, Compliance, and HR Services to evaluate, select,
and implement GRC technology solutions, driving thought leadership and
enabling continuous product innovation.
Served as the primary liaison between business stakeholders and
implementation teams, supporting decision-making through solution and
architecture reviews, and resolving critical issues with data-driven strategies.
Supported UAT cycles, deployment planning, and post-go-live optimization,
ensuring smooth adoption and continuous improvement of GRC solutions.
Analyzed data from post-completion surveys to enhance customer
satisfaction ratings for future projects.

Mentored junior consultants on effective problem-solving methodologies.
Directed successful project teams, ensuring on-time and within-budget
project completion.
Managed multiple high-priority projects concurrently while adhering to
deadlines.
Executed enterprise-wide GRC technology implementations across Risk,
Compliance, Security Operations, and Audit, achieving 95% on-time delivery
and reducing implementation defects by 30% through structured project
governance.
Facilitated stakeholder meetings to ensure alignment on project goals and
deliverables.
Collaborated with cross-functional teams to implement effective and efficient
solutions.
Developed and presented impactful recommendations to senior executives
to influence decision-making.
Translated complex data and insights into actionable strategies for client
implementation.
Enabled data-driven decision-making by modernizing GRC workflows and
integrating data governance structures, improving reporting accuracy by
40% and reducing manual analysis time by 25-30%.
Cultivated strong client relationships, serving as a trusted advisor and
thought leader.
Led client engagements, providing strategic advice and solutions for
complex business challenges.
Applied deep industry knowledge to analyze client challenges and pinpoint
root causes.
Planned and deployed centralized control libraries and automated
workflows, improving audit readiness by 35% and reducing control testing
cycle time by 20%.
Provided actionable recommendations to enhance client satisfaction.
Conducted data analysis to identify process improvements.
Presented executive dashboards offering real-time visibility into risk posture,
compliance gaps, and remediation progress, accelerating leadership
decision cycles by 25%.
Prepared comprehensive reports summarizing operational results and
financial performance.
Managed multi-phase GRC transformation programs from inception to
execution, coordinating cross-functional teams and ensuring 100%
alignment with enterprise governance standards.
Streamlined GRC processes through workflow automation and
modernization, improving operational efficiency by 30% and strengthening
regulatory adherence across business units.