Shubham Mandal

Led and managed a wide range of regulatory, statutory, and partner audits, including PSP, CIBIL, NPCI TPAP, PCI DSS, DL SAR, DigiLocker, and OPV audits. Drove internal InfoSec activities including DLP, AV rule reviews, TPRMs, user access reviews, phishing simulations, SAST testing, and security awareness training.

Planned and executed process-led internal, external, and Third-Party/Vendor Risk Assessments (TPRMs) for new product launches and partner integrations. Conducted quarterly user access reviews across critical environments including AWS IAM to validate least-privilege access.

Ensured organization-wide and platform-level compliance across multiple critical technology stacks in alignment with regulatory frameworks such as ISO/IEC 27001, SOC 2, RBI DL SAR, RBI CoFT, PCI DSS, and PCI 3DS. Executed quarterly internal security audits and program-managed 30+ statutory, regulatory, and TPRM assessments.

Performed independent third-party information security and compliance audits, including PCI DSS v4.0, ISO/IEC 27001:2022, SOC 2, and RBI DL SAR for 10+ external clients. Conducted gap assessments and maintained comprehensive audit evidence repositories.

Led and executed end-to-end security and compliance audits for 12 US-based startups across ISO 27001, SOC 2, and HIPAA. Managed the complete audit lifecycle using Scrut Automation's GRC platform.

Pursued a Bachelor of Technology in Electronics & Communication Engineering.