Open to opportunities

Ayush Panwar

@ayushpanwar

Message

I build scalable GRC programs that strengthen security, compliance, and third-party risk management.

India

Message

What I'm looking for

I'm looking to build and scale security, compliance, AI governance, and third-party risk programs in a fast-paced organization that values proactive risk management and a strong security culture.

At Fortive, I build Governance, Risk, and Compliance programs, including AI acceptable-use policies and security guardrails, while coordinating SOC 2, GDPR, SOX, ISO 27001, and HITRUST audits. I also deliver compliance and security awareness training to 10,000+ employees and streamline third-party risk reviews, including assessments for AI vendors.

Previously at ThrivePass, I automated recurring security processes with Vanta, developed security policies, handled security incidents, and led BC/DR and risk assessments across SOC 2, GDPR, HIPAA, CCPA, and PCI DSS. My cybersecurity foundation includes vulnerability assessments, penetration testing, governance, and client-facing security strategy work.

Experience

Work history, roles, and key accomplishments

Current

Senior Analyst, Governance, Risk, and Compliance (GRC)

Current

Fortive

Aug 2025 - Present (1 year)

Developed comprehensive GRC programs, including AI acceptable use policies and security guardrails. Led coordination for internal and external audits, maintaining compliance with SOC 2, GDPR, SOX, ISO 27001, and HITRUST.

GRC AI Policy SOC GDPR SOX ISO 27001 HITRUST Audit Coordination Executive Reporting Third Party Risk Management Security Awareness Training

Senior Security and Compliance Analyst

ThrivePass

Jun 2022 - Aug 2025 (3 years 2 months)

Spearheaded adherence to security frameworks including SOC 2, GDPR, HIPAA, CCPA, and PCI DSS. Designed and implemented security policies, conducted risk assessments, and automated processes using Vanta.

SOC GDPR HIPAA CCPA PCI DSS Security Policies Risk Assessment Vanta Automation Third Party Risk

Cyber Specialist

India Research Centre

May 2020 - Jun 2022 (2 years 1 month)

Collaborated to create and execute a security and compliance strategy. Conducted risk assessments, monitored security controls, and performed vulnerability assessments and penetration testing.

Security Strategy Risk Assessment ISO 27001 GDPR Vulnerability Assessment Penetration Testing Security Controls Client Communication

Information Security Analyst

Root'n Wings Media

Sep 2019 - May 2020 (8 months)

Developed plans to safeguard computer files and executed risk management processes. Coordinated vulnerability assessments and penetration testing, and implemented security measures like encryption and firewalls.

Cryptography Risk Management Vulnerability Assessment Penetration Testing Encryption Firewalls Security Policies Incident Response

Intern - Cyber Education and Services

Quick Heal Technologies Ltd

Oct 2018 - Apr 2019 (6 months)

Assisted in security assessments including vulnerability analysis and penetration testing. Supported development of security frameworks and contributed to cybersecurity educational programs.

Vulnerability Analysis Penetration Testing Security Frameworks Educational Programs LMS

Intern - Cyber Education and Services Division

Quick Heal Technologies Ltd

Oct 2018 - Apr 2019 (6 months)

Assisted in security assessments including vulnerability analysis and penetration testing. Supported development of security frameworks and contributed to cybersecurity educational programs.

Vulnerability Analysis Penetration Testing Security Frameworks LMS Cybersecurity Education