Looking for a job

Shailes Nandan

@shailesnandan

Cybersecurity GRC consultant at Societe Generale Global Solution Centre who reduced critical vulnerabilities by 35%.

At Societe Generale Global Solution Centre, I led an enterprise-wide risk assessment covering 100+ applications and helped achieve a 35% year-over-year reduction in critical vulnerabilities. I also designed a risk heatmap dashboard for C-suite decision-making.

At Wipro Ltd, I built a centralized GRC reporting framework and led the migration of a manual risk register to Service Now. Across financial services, telecom, and IT services, I’ve worked on vendor risk, security audits, and governance programs, with a focus on ISO 27001:2022 and related security frameworks.

Experience

Work history, roles, and key accomplishments

Cyber Security Consultant – GRC & Compliance

Societe Generale Global Solution Centre

Mar 2024 - May 2026 (2 years 2 months)

Led enterprise-wide risk assessment program covering 100+ applications, achieving a 35% YoY reduction in critical vulnerabilities. Designed and deployed a risk heatmap dashboard for C-suite decision-making and drove end-to-end Risk Governance for critical infrastructure, SaaS, and endpoint environments.

ISO 27001 Risk Assessment Risk Governance Risk Heatmaps Corrective Action Planning Audit Life Cycle Vendor Risk Management GRC SaaS Security Endpoint Security

Manager – Governance, Risk & Compliance

Wipro Ltd

Nov 2021 - Mar 2024 (2 years 4 months)

Built and maintained a centralized GRC reporting framework and compliance scorecard for enterprise infrastructure aligned to ISO 27001:2022. Led migration of manual risk register to ServiceNow and conducted vendor risk assessments for 60+ SaaS vendors.

GRC ISO 27001 ServiceNow Vendor Risk Management Risk Assessment Compliance Scorecards PIM PAM CyberArk BeyondTrust

SME – IT Security Specialist

Ericsson India Global Services

Jun 2018 - Nov 2021 (3 years 5 months)

Served as IT Security SME for multiple telecom clients, leading endpoint security, vulnerability assessments, and risk reviews. Designed and implemented Symantec VIP Two-Factor Authentication (IAM) across Linux and Windows environments.

Endpoint Security Vulnerability Assessment Nessus IAM Symantec VIP 2 Factor Authentication Security Audits Statement Of Applicability ISRI

Information Security & Compliance Specialist

Capgemini Technology Services India Ltd

Sep 2012 - Jun 2018 (5 years 9 months)

Managed Symantec Endpoint Protection (SEP) globally for 180,000+ endpoints and acted as L3 escalation point for security incidents and disaster recovery. Drove enterprise patch management programme and led penetration testing engagements with external vendors.

Symantec Endpoint Patch Management SCCM Penetration Testing Security Incident Response Disaster Recovery CISO Reporting CySIP