Nikunj Mehta
@nikunjmehta
Information security leader driving compliance, risk reduction, and pragmatic security programs.
IndiaWhat I'm looking for
I am an accomplished information security leader with 12+ years of experience in risk management, VAPT, PCI DSS, GDPR, ISO 27001, SOC 2 and audit compliance. I blend technical hands-on skills with strategic program leadership to strengthen organizational security posture.
I have led SOC 2 readiness, ISO 27001 programs, PCI DSS assessments, VAPT initiatives and SIEM/EDR deployments across global operations. I deliver measurable outcomes through control gap remediation, compliance dashboards, KPIs and board-level reporting.
My technical toolkit includes network and application security testing tools and deep experience in incident response, third-party risk assessments and security architecture. I have managed and mentored security teams while balancing security requirements with cost and business priorities.
I am committed to building security-aware cultures through training, policy governance and cross-functional collaboration, acting as a trusted advisor to leadership and external auditors to achieve and maintain compliance.
Experience
Work history, roles, and key accomplishments
IT Security & Compliance Manager
Sodexo India Services Private Limited
Aug 2025 - Present (5 months)
Led design and continual improvement of IS&T compliance programs and owned SOC 2 readiness, audits, and remediation, establishing compliance dashboards and driving corrective actions for control gaps.
Information Security Freelancer
COMPLY Technologies
Jun 2022 - Aug 2025 (3 years 2 months)
Led organisation-wide cybersecurity programs as vCISO, owning ISO 27001, GDPR, PCI DSS, ITGC and SOC audit programs, VAPT, incident response planning and security product evaluations for multiple clients.
Information Security Officer
Thomas Cook Pvt. Ltd.
Oct 2017 - Jun 2022 (4 years 8 months)
Developed and enforced security policies and coordinated PCI DSS, ISO 27001, ITGC and VA/PT audits while managing security product implementations, vendor evaluations and a team of security staff.
Information Security Analyst
Magnamious Systems Pvt. Ltd.
Jun 2015 - Oct 2017 (2 years 4 months)
Managed security controls, risk assessments and vulnerability management, conducted assessments of applications and network devices and delivered prioritized remediation plans and training.
Information Security Analyst
Rudra Pvt. Ltd.
May 2013 - May 2015 (2 years)
Formalized security policies and procedures, conducted web application and network device assessments, prepared risk treatment plans and delivered end-user and contractor security awareness sessions.
Education
Degrees, certifications, and relevant coursework
WMWelingkar Institute of Management
Postgraduate Diploma in Management, E-Business
Postgraduate Diploma in Management with specialization in E-Business completed in October 2019.
MIEL e-Security
Postgraduate Diploma in Management (Certification), Information Security & Governance
Postgraduate Diploma in Management Certification in Information Security & Governance completed in October 2012.
Calorx Teachers' University
Bachelor of Computer Applications, Computer Applications
Bachelor's degree in Computer Applications conferred in July 2011.
Tech stack
Software and tools used professionally
Availability
Location
IndiaAuthorized to work in
Job categories
Interested in hiring Nikunj?
You can contact Nikunj and 90k+ other talented remote workers on Himalayas.
Message NikunjFind your dream job
Sign up now and join over 100,000 remote workers who receive personalized job alerts, curated job matches, and more for free!
