Shantanu Patil

I’m a Senior Compliance Analyst focused on turning compliance requirements into repeatable, audit-ready controls. I lead audit planning, risk assessment, and compliance lifecycle management across global control frameworks, translating expectations from ISO 27001, SOC 2 Type II, HITRUST, HIPAA, NIST 800-53, PCI DSS, and ISO family standards into actionable evidence.

In my current role, I manage audits across multiple business units—establishing, monitoring, documenting, and updating compliance controls and findings. I also map ITGC, HIPAA, and HITRUST controls across Azure cloud environments, and embed vendor qualification criteria into Procurement SOP to ensure third-party onboarding is consistently controlled.

What sets me apart is automation: I built Claude AI-powered tools for Third-Party Risk Management and internal due diligence. The solutions automate vendor onboarding, risk classification, security questionnaire generation, and compliance activity-to-control mapping—reducing manual due diligence by 40% across 50+ vendors and eliminating manual follow-ups for evidence reminders.

Previously, I managed VAPT assessments across 10+ client systems, supported CERT-In empanelment, and identified 30+ critical vulnerabilities with structured remediation plans. I also executed 15+ system and ITGC audits and developed information security policies and procedures to keep organizations aligned with CERT-In and RBI guidance, while driving continuous readiness.