Sadaan Surve

I’m a GRC & Application Security Analyst with one year of experience managing security across a portfolio of 80+ enterprise applications in a highly regulated financial environment. I deliver end-to-end application security assessments, coordinate PCI DSS audits, manage organizational risk treatment, and run database PII reviews at scale.

In my current role, I’ve hardened security posture through criticality assessments, data flow diagrams, and quarterly access control matrix reviews, including maintaining a consolidated bank-wise IP registry. I uncover and drive closure of unprotected PII and card data at rest using encryption, hashing, and masking, while owning the organizational risk register and producing executive-level mitigation reports. I also improve security review outcomes with data-in-transit and cipher suite checks, partnering with external audit support, and help standardize governance by building a centralized API registry plus SOPs for application criticality and risk frameworks.