Abhi Banerjee

How would you describe your role within your organization? What are your key responsibilities?

I lead the global Identity Platform with a mandate centered on operational risk reduction, regulatory compliance, and control-by-design architecture. Identity is one of the firm's highest-impact control domains, touching every human and machine entity across authentication, authorization, credential lifecycle, and privileged access. My focus is to simplify identity interactions while strengthening governance: every workflow is engineered to enforce RBAC, policy validation, and CMDB-linked controls at the point of initiation. This ensures that business and revenue-generating teams operate within a fully compliant identity perimeter, where non-compliant actions are technically impossible rather than procedurally discouraged.

Can you share an example of a significant IT transformation or change initiative you've led and the lessons you learned?

In 2018, I played a key role in the firm's public cloud adoption by translating on-premises regulatory requirements into rigorously tested AWS IAM policy baselines. A primary challenge was enabling the IT workforce to develop the cloud operations capabilities required to accelerate adoption. I also modernized enterprise ITSM practices to generate meaningful performance data and applied Design Thinking to create artifacts that simplified cloud transformation requirements across peer, junior, and management stakeholder groups. These efforts contributed to a 96% performance improvement in the first year.

How do you ensure that diversity, equity, and inclusion are not just initiatives but core principles embedded in the company's culture and technology teams?

I view diversity, equity, and inclusion as core design principles rather than standalone initiatives. Because bias can influence how people interpret needs, access systems, and engage with technology, I approach every workflow with empathy and a focus on equitable outcomes.

In complex IAM platform services, each interconnected workflow functions like a business capability with distinct users, risks, and success criteria. To support these differences, we design human-computer interfaces that reflect a broad range of user needs and operating contexts.

• Build empathy into workflow design and stakeholder engagement.
• Reduce friction by making secure and compliant actions easier to perform.
• Continuously refine interfaces through experimentation, feedback, and inclusive design practices.

This remains an ongoing journey: creating technology experiences that are secure, usable, and inclusive for every stakeholder group.

Can you share some of the key challenges your team faces in aligning IT and business objectives with regulatory requirements, and how do you ensure that risk management is integrated into the company culture?

With 25+ years in Access Management and Cryptography, I have seen how complex IAM becomes when regulatory requirements must be translated into enforceable, business-ready controls. My approach is to embed governance, risk rules, and compliance logic directly into IAM workflows, automation, and user interfaces so that non-compliant actions are prevented by design.

This reduces operational friction, keeps employees focused on revenue-generating work, and strengthens the control environment by making compliant behavior the default outcome. The goal is a secure, intuitive, and empathy-driven experience where governance and usability reinforce each other.