Skip to main content
Shashank TanwarST
Looking for a job

Shashank Tanwar

@shashanktanwar

Senior information security auditor specializing in cloud risk governance, ISO/ITGC/SOX/SOC2 compliance, and enterprise audit programs.

India
Message

What I'm looking for

I’m looking to lead cloud risk and security governance programs—driving ISO/ITGC/SOX/SOC2/IRAP alignment, improving audit outcomes, and mentoring teams—within an organization that values rigorous compliance, measurable improvements, and cross-functional collaboration.

I’m a Senior Auditor and Cloud Risk and Governance Professional with expertise in enterprise-wide governance initiatives across ITGC, SOX, SOC2, ISO 27001, and Third-Party Risk Management. I lead IT risk assessments and governance reviews for AWS cloud environments, ensuring adherence to industry security standards and strengthening cloud governance through collaboration with global stakeholders.

I drive compliance initiatives aligned with NIST CSF 2.0, ISO 27001, SOX, CIS controls, GDPR, and cloud governance frameworks, while architecting risk assessment processes across compliance workstreams. I’ve improved compliance maturity by 35%, reduced audit findings by 40%, increased internal security compliance by 20%, and boosted governance reviews efficiency by 30%—mentoring teams and standardizing governance to enhance audit readiness and regulatory alignment.

Experience

Work history, roles, and key accomplishments

SS
Current

Senior Principal Security Auditor

Skillsoft Software Services

Dec 2023 - Present (2 years 6 months)

Led enterprise-wide IT risk assessments and governance for AWS cloud environments, strengthening cloud governance and improving compliance maturity by 35% within one year. Directed ITGC, SOC 2, SOX, and ISO 27001 audit programs and remediation tracking aligned to NIST CSF 2.0, CIS Controls, GDPR, and third-party risk management; mentored teams to improve governance visibility.

CA

Senior Consultant - Risk & Compliance

Capgemini

Dec 2017 - Apr 2019 (1 year 4 months)

Executed cloud control testing and security assessments to increase compliance by 35% and coordinated audits across multiple business functions. Supported IT governance framework implementation and vendor risk assessments, strengthening organizational security posture through policy and compliance alignment initiatives.

DS

ITGC Specialist - Information Security

DCM Data Systems

Aug 2016 - Jun 2017 (10 months)

Implemented compliance and governance projects that increased enterprise security by 20%. Conducted internal and external audits, supported security evaluation and governance processes, and collaborated with stakeholders to strengthen process compliance and governance maturity.

ML

Professional Services Associate

Microland Ltd

Feb 2014 - Aug 2016 (2 years 6 months)

Facilitated identity and access management governance activities and compliance audits to ensure regulatory alignment. Improved control alignment by over 20% by evaluating access governance and coordinating with 8 stakeholders, and supported audit readiness for access compliance initiatives.

Education

Degrees, certifications, and relevant coursework

NMIMS logoNM

NMIMS

Master of Business Administration (MBA), Business Administration

2023 - 2024

Master of Business Administration (MBA) at NMIMS from 08/2023 to 08/2024 in Hyderabad, India.

Tech stack

Software and tools used professionally

Shashank hasn't added their tech stack

Don't worry, there are 90k+ talented remote workers on Himalayas

Find your dream job

Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!

Sign up
Himalayas profile for an example user named Frankie Sullivan