hitesh sonawane

I’m a GRC & TPRM Analyst who’s comfortable where many teams stop: I’ve run risk programmes and translated security evidence into control narratives auditors can use.

Over 4.6 years at Tata Consultancy Services, I delivered measurable security and governance outcomes—reducing OWASP Top 10 vulnerabilities by 38% across 12 enterprise applications, and improving SOC mean-time-to-detect by 22% through Sentinel/Splunk detection engineering and log correlation work in ServiceNow.

I also strengthened third-party risk management in a way that moved ratings, not just paperwork—taking a global medical device manufacturer’s SecurityScorecard rating from 68 to 82 through structured DDQ, tiering, and continuous vendor monitoring using BitSight and SecurityScorecard.

I work across ISO 27001, NIST CSF, and DORA, maintaining risk registers, testing control effectiveness, and running third-party risk assessments, then translating findings into governance reports a risk committee can act on. I’m currently completing an MSc in Cybersecurity at NCI and I’m open to GRC Analyst, TPRM Analyst, and IT Risk Analyst roles.