Looking for a job

Akul Goyal

@akulgoyal1

Message

I lead M&A cyber due diligence and third-party risk assessments for global enterprises.

India

Message

At GE Vernova, I lead cybersecurity due diligence for mergers, acquisitions, and divestitures, assessing security posture, threats, vulnerabilities, and regulatory risks across the deal lifecycle.

I develop mitigation plans, support Transition Service Agreements, and help acquired entities align with cybersecurity frameworks to accelerate post-merger integration and compliance readiness.

Previously at PwC, I owned end-to-end third-party risk assessments for high-risk vendors, translating evidence and security gaps into executive-level reports and targeted remediation. My work connected third-party findings to enterprise risk management programs.

I also bring hands-on security assessment experience from EY, Infosys, and earlier roles, covering VAPT, web application testing, cloud infrastructure security, patch management, and ISO 27001 gap analysis.

Experience

Work history, roles, and key accomplishments

Current

Staff Risk Analyst – M&A Cyber

Current

GE Vernova

Apr 2025 - Present (1 year 5 months)

Lead cybersecurity due diligence for mergers, acquisitions, and divestitures, assessing target companies' security posture and regulatory compliance. Develop risk mitigation plans and support post-merger integration and TSA execution.

M&A Cybersecurity Due Diligence Risk Assessment ISO 27001 NIST CSF GDPR CCPA DORA TSA Post Merger Integration Stakeholder Management

Associate 2 (Risk Assurance)

PricewaterhouseCoopers SDC

Feb 2021 - Apr 2025 (4 years 2 months)

Led risk and control assessments for third-party service providers, ensuring alignment with ISO 27001, NIST CSF, SOC 2, and GDPR. Designed Inherent Risk Questionnaires and translated findings into executive-level reports.

Third Party Risk Management Risk Assessment ISO 27001 NIST CSF SOC GDPR ERM Report Writing

Associate Consultant (Cyber Security)

Ernst & Young LLP

Nov 2020 - Feb 2021 (3 months)

Executed Vulnerability Assessment and Penetration Testing (VAPT) for public-facing, DMZ, and intranet assets using Qualys and Kali Linux. Performed web application security assessments aligned with OWASP Top 10 and CIS Benchmarks.

VAPT Qualys Kali Linux OWASP Top 10 CIS Benchmarks Web Application Security

Information Security Engineer

Infosys Ltd.

Nov 2019 - Oct 2020 (11 months)

Delivered VAPT and cloud infrastructure security assessments using Qualys, Kali Linux, and Metasploit Pro. Managed enterprise-wide patch management and coordinated bug bounty programs and phishing campaigns.