Naveen Lal

Collect and validate access, endpoint, logging, alerting, and remediation evidence for HITRUST readiness. Coordinate corrective action for 85+ findings across endpoint, operating system, logging, and cloud environments.

Maintained risk and compliance records in ServiceNow GRC and supported policy, standards, and customer security questionnaires. Executed SOX ITGC access and entitlement reviews across five enterprise applications, identifying 30+ exceptions.

Led 125+ third-party security risk assessments using SOC 1/SOC 2 reports, penetration-test reports, and vendor documentation. Performed 200+ security risk and control assessments against NIST, ISO 27001, HIPAA, and SOX.

Completed 50+ third-party security assessments, reviewing SOC 1, SOC 2, PCI DSS, and control evidence. Supported SOC 2 audit readiness through risk documentation and evidence collection.

Audited IAM policies and logical access controls for SOX, HIPAA, and NIST compliance. Supported identity governance by validating lifecycle, access-risk, and remediation controls in a large healthcare environment.

Compiled and validated SOX ITGC evidence and assessed logical access, change-management, and security controls. Monitored security events in IBM QRadar and supported incident-response activities.

Completed training at SailPoint Identity University.