Looking for a job

Tanmoy Daw

@tanmoydaw

Message

I help organisations strengthen compliance, audit readiness, and security through ISO 27001, DPDPA, ITGC, and VAPT.

India

Message

What I'm looking for

I'm looking to deepen my work in cybersecurity consulting, GRC, IS audit, cloud security, and penetration testing, helping organisations translate regulatory and technical risks into practical, audit-ready remediation.

At ISECURION, a CERT-In empanelled firm, I lead ISO 27001:2022 gap assessments, IS audits, VAPT, and RBI, NABARD, and DPDPA compliance reviews for banks, NBFCs, manufacturers, healthcare organisations, and technology companies.

I've identified 300+ control deficiencies across 50+ clients, supported eight organisations to ISO 27001:2022 certification readiness, and delivered DPDPA, SOC 2, ITGC, ITAC, and GITC audit support with risk-prioritised remediation roadmaps.

I pair governance work with hands-on offensive and cloud security, testing web applications, networks, and Active Directory environments while building CloudGRC-AI, a VAPT automation framework, and a DPDPA audit toolkit. My responsible vulnerability disclosure to NASA reflects the practical security mindset I bring to every engagement.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity & GRC Consultant | Information Security Auditor

Current

ISECURION Pvt. Ltd.

Jan 2026 - Present (8 months)

Led ISO 27001:2022 gap assessments, IS audits, and RBI/NABARD/DPDPA compliance reviews for 50+ clients, identifying 300+ control deficiencies. Supported 8 clients to ISO 27001:2022 certification readiness and executed SOC 2 audit support and ITGC assessments.

ISO 27001 RBI IT IS NABARD DPDPA Information Systems Audit VAPT ITGC Cloud Security SOC2 CVSS Risk Assessment CAPA Azure AD Okta CyberArk Sailpoint GCP OWASP LLM Top 10

ITGC & Information Security Auditor

Singhi & Co.

Oct 2025 - Jan 2026 (3 months)

Performed 8+ ITGC audits covering access controls, change management, backup & recovery, and monitoring controls. Conducted ITAC walkthroughs and SAP configuration reviews, documenting control gaps and SOD conflicts.

ITGC ITAC GITC SAP SoD Analysis Access Reviews Azure AD Okta CyberArk Sailpoint

Cybersecurity Intern

DataSpace Security

Jan 2025 - Jun 2025 (5 months)

Documented 80+ findings across web application, network, and Active Directory security assessments. Supported vulnerability scanning and security hardening advisory under senior consultant supervision.

Vulnerability Scanning Security Hardening Web Application Security Network Security Active Directory

Education

Degrees, certifications, and relevant coursework

University of Engineering & Management (UEM), Kolkata

B.Tech, Computer Science (Cybersecurity Specialisation)

2021 - 2025

Pursued a B.Tech in Computer Science with a Cybersecurity specialisation, covering network security, cryptography, ethical hacking, digital forensics, and secure software development.