Open to opportunities

sandeepkumar patil

@sandeepkumarpatil

Message

I lead GRC, ISMS, audit, privacy, and cyber-risk programs that strengthen compliance and security resilience.

India

Message

What I'm looking for

I'm looking to lead GRC, ISMS, audit, privacy, and cyber-risk programs where I can strengthen control maturity, regulatory assurance, business resilience, and executive risk visibility.

I lead GRC, ISMS, internal and external audit, and SOC 2 initiatives at Quality Austria Central Asia, helping organizations achieve certification with zero major non-conformities. I also build privacy, data protection, business continuity, IT service management, enterprise risk, and third-party risk programs aligned to ISO standards, GDPR, DPDP Act, and NIST CSF.

Previously at Pulsar Measurement, I managed security risk assessments, incident response, security policies, awareness training, RSA Archer workflows, and Microsoft 365/Azure security controls including MFA, EDR, SIEM, DLP, and email security. I led SOC and threat intelligence operations, from log monitoring and event analysis to incident investigation and remediation.

My earlier consulting and infrastructure work spans cloud, server, network, virtualization, ITSM, Active Directory, Windows Server, and end-user support. I've led an end-to-end ISO/IEC 27001:2022 certification for a multinational organization within six months, contributing to a 30% increase in client contract renewals.

Experience

Work history, roles, and key accomplishments

Current

ISMS Manager / Auditor

Current

Quality Austria Central Asia

Mar 2024 - Present (2 years 5 months)

Led enterprise-wide GRC, ISMS (ISO 27001:2022), Internal Audit, External Audit, and SOC 2 Type I & II initiatives, driving audit readiness, control maturity, and successful certification with zero major non-conformities. Architected Privacy & Data Protection programs aligned with ISO 27701, GDPR, and DPDP Act, ensuring regulatory compliance and strong data governance.

GRC ISMS ISO 27001 Internal Audit External Audits SOC II ISO 27701 GDPR ITSM Enterprise Risk Management TPRM NIST Cybersecurity Framework RSA Archer KPI Reporting Compliance

IT Security Engineer and Officer

Pulsar Measurement

Jan 2021 - Dec 2023 (2 years 11 months)

Conducted security risk assessments, implemented controls, and managed incident response and breach notification processes to mitigate cyber and compliance risks. Developed and maintained information security policies, procedures, and security awareness training programs.

Security Risk Assessment Incident Response Security Policies Security Awareness Training RSA Archer Microsoft 365 Azure Azure AD Intune Autopilot MDM MFA EDR SIEM DLP Email Security SOC Threat Intelligence

Senior IT Consultant

GSB Consulting Limited

Oct 2019 - Dec 2020 (1 year 2 months)

Planned and delivered IT and security projects, including network, server, and cloud implementations, ensuring successful deployment, service transition, and stakeholder alignment. Designed, built, and supported on-premise and virtualized environments, including Windows Server, enterprise operating systems, and LAN/WAN infrastructure.

IT Project Management Network Implementations Cloud Implementation Windows Server LAN WAN DNS DHCP Firewalls ITSM ServiceNow Endpoint Protection Vulnerability Management Threat Analysis System Hardening ISO 27001 GDPR

Desktop Support Engineer

Addsun Technology

Jan 2014 - Aug 2017 (3 years 7 months)

Administered enterprise Active Directory environments on Windows Server 2008/2012, including user management, group policies, backup, restore, and replication. Supported secure network operations by managing VPN connectivity, VLANs, DNS, DHCP, and enforcing security policies across branch office environments.