Looking for a job

Sahil Nagmote

@sahilnagmote

Message

Governance Risk and Compliance | Information Security | Cyber Security | IT Audit |

United States

Message

What I'm looking for

Seeking a GRC role to drive enterprise risk automation. I aim to leverage my 5+ years of experience to manage continuous compliance (PCI, HIPAA, SOX) for large-scale infrastructure and lead cross-functional risk initiatives.

Technology Risk and Compliance professional with a Master's in Cybersecurity and 5+ years of experience driving enterprise-level GRC initiatives and IT security audits. Demonstrated expertise in architecting automated compliance workflows, managing risk assessments, and executing continuous monitoring solutions across large-scale server environments utilizing RSA Archer, Tripwire, and ServiceNow. Highly proficient in ensuring rigorous adherence to complex regulatory frameworks, including PCI DSS, HIPAA, HITRUST, SOX, NIST, and ISO 27001. A strategic communicator adept at partnering with cross-functional teams, internal audit, and global financial control to mitigate enterprise risk, streamline reporting, and align security operations with international business objectives.

Experience

Work history, roles, and key accomplishments

Current

Technology Risk and Compliance Analyst

Current

Walgreens

May 2025 - Present (1 year 2 months)

Single-handedly manage continuous compliance monitoring (PCI DSS, HIPAA, HITRUST, SOX) for 1,200+ servers via Tripwire. Architect and deploy automated GRC workflows in RSA Archer for cross-functional teams, reducing audit times. Orchestrate secure server onboarding via ServiceNow and act as the strategic compliance liaison for enterprise stakeholders.

Security Analyst

Orbiter Solutions

Jun 2023 - May 2025 (1 year 11 months)

Mitigated enterprise threats utilizing SIEM tools like Splunk and QRadar, improving threat detection by 30%. Authored security policies to boost PCI DSS compliance by 50%. Executed vulnerability assessments, reducing risk exposure by 35%, and deployed automated monitoring to prevent unauthorized data access.

Security Analyst Intern

Asterisk

Nov 2020 - Jul 2022 (1 year 8 months)

Tracked network traffic via IDS/IPS, enhancing network defense and reducing threats by 30%. Led incident response efforts that minimized business impact and cut recovery time by 40%. Performed vulnerability scans across projects and maintained firewalls (CrowdStrike, Symantec) to reduce unauthorized access attempts by 35%.