Page * of *

Sumit K. Pal, CISA, CGEIT, CRISC

IT Audit, Compliance & Security Professional

ad3ypu@r.postjobfree.com +1-609-***-****

LinkedIn Profile

Sumit is a senior audit, compliance and security professional with Cisco with over 25 years of experience in internal audit and IT/cybersecurity matters, software engineering and executive management. He has worked with both public and private companies in a range of industries, including not-for-profit organizations, manufacturing, real estate, wholesale and distribution, consumer goods, software, technology, life science, professional services, financial services, media and others. Sumit holds ability in the following disciplines:

• IT General Controls (ITGC) and Cybersecurity Assessments

• System and Organization Controls Audits (SOC 1SM, SOC 2SM, SOC 3SM, SOC for Cybersecurity)

• Cross Regulation/Standards Controls Deployment (e.g., SOC 2SM, ISO 27001/27002, etc.)

• Internal Audit

• GRC software implementation including Data Analytics/Data Mining (hands-on experience on Diligent One

(HighBond) and AuditBoard

• Consultation, implementation guidance and project execution using Computer Aided Audit Techniques (CAAT) tools, including ACL Analytics and IDEA

• Third Party Risk Assessments

• Royalty/IP Audits

Sumit is an experienced practitioner in the IT audit space including internal controls as well as the implementation and use of the GRC platforms. Has extensive experience in developing scripts to help in automation of reports / dashboards as well as integration with other third-party platforms. Prior to joining Cisco in 2020, Sumit served in senior roles including principal for Seiler and principal and executive vice president for WithumSmith+Brown, COO for GlobalValue Consulting, executive vice president for NovaSoft Information Technology, vice president for Igate / Mastech, and regional manager – North for ORG Systems. Education and Certifications

• Master of Management Studies, Birla Institute of Science & Technology, Pilani, India

• Certified Information Security Auditor

• Certified in Governance of Enterprise Information Technology

• Certified in Risk and Information Security Controls Professional Affiliations

• ISACA (previously Information Systems Audit and Control Association)

• Institute of Internal Auditors

Board Memberships

• Program Director, ISACA Silicon Valley Chapter, 2019 – 2022

• Vice President, Seminars, IIA – San Jose Chapter 2023