Open to opportunities

ashwini gupta

@ashwinigupta

Message

Information security specialist experienced in compliance, SOC, and IAM.

Italy

Message

What I'm looking for

I seek a security role focused on SOC/IR, compliance, or IAM where I can lead remediation, improve controls, mentor teams, and align security with business goals.

I am an information security specialist with around 7 years in cybersecurity, combining five years of professional experience and two years of master's study. I have delivered security operations, vulnerability assessment & penetration testing, governance, and compliance work across financial and service organizations.

I have implemented and integrated frameworks such as ISO 27001, NIS2, DORA and Circular No.285, conducted gap analyses, managed monthly vulnerability scanning and remediation, supported internal and external audits, and coordinated business continuity plan tests. I have hands-on experience with SIEM (IBM QRadar), EDR (SentinelOne, McAfee), DLP (McAfee DLP), ForgeRock identity components, and cloud and network security.

I communicate findings clearly to executive-level stakeholders and clients, create policy and evidence for compliance (including PCI DSS and GDPR), and mentor others through tutoring and research activities. I am motivated to strengthen security posture through practical controls, risk-based remediation, and alignment with business objectives.

Experience

Work history, roles, and key accomplishments

Information Security Specialist

Banca Finint

Aug 2024 - Aug 2025 (1 year)

Integrated ISO27001, NIS2, DORA and Circular No.285 into organizational security policies, conducted monthly vulnerability scans and coordinated remediation, and supported incident response and group-level data governance.

Vulnerability Assessment ISO 27001 NIS 2 DORA Incident Response GDPR

Identity and Access Management Engineer

Athesys Srl

Jul 2024 - Aug 2024 (1 month)

Installed, configured and upgraded ForgeRock components, troubleshot integration issues and produced detailed system configuration and procedure documentation.

Identity And Access Management Authentication Documentation Configuration

Cybersecurity Compliance Analyst

Integrity360

Feb 2023 - Mar 2024 (1 year 1 month)

Assessed client systems and cloud environments for risks, coordinated VAPT activities, validated application security controls and prepared executive summaries and gap analyses to improve client security posture.

VAPT PCI DSS GDPR Gap Analysis Application Security Reporting

Cybersecurity Expert (Tutor)

Freelance

Nov 2022 - Jan 2023 (2 months)

Provided cybersecurity tutoring and mentoring services focused on practical security techniques and research-driven learning across assorted topics and labs.

Research Mentoring System Hardening Security Best Practices

Cybersecurity Analyst (Intern)

SAP USA

Aug 2022 - Sep 2022 (1 month)

Performed phishing email analysis, system hardening and password policy verification, and delivered final analysis with remediation recommendations during a remote internship.

Phishing System Hardening Password Policy Security Analysis Recommendations Remote Collaboration

Cybersecurity Analyst

CtrlS Datacenters

May 2017 - Dec 2019 (2 years 7 months)

Operated SIEM (IBM QRadar), conducted malware and phishing analysis, installed and troubleshot DLP agents, and trained business unit managers on security risks and remediation based on vulnerability scans.

QRadar SIEM Malware Analysis Phishing Endpoint Security Vulnerability Management Training

Education

Degrees, certifications, and relevant coursework

Ca' Foscari University of Venice

Master of Science, Cybersecurity

2020 - 2022

Activities and societies: Thesis and internship in cybersecurity; coursework in software security, cryptography, and system verification; hands-on tools like Docker, Python, Metasploit, Nmap.

Master's program in Cybersecurity covering web security, cryptography, software security, formal methods, and advanced algorithms with applied practical tools and research projects.

Jawaharlal Nehru Technological University

Bachelor of Engineering, Electronics and Communication Engineering

2013 - 2017

Activities and societies: Coursework in C, Java, data structures, probability and stochastic processes, computer architecture, and digital image processing.

Bachelor of Engineering in Electronics and Communication Engineering with coursework in computer networks, digital communications, operating systems, and programming.