Open to opportunities

Tarun Aggarwal

@tarunaggarwal1

Information Security Consultant at CyberCube Services who led compliance assessments and prepared audit-ready reports for fintech and enterprise clients.

India

Message

At CyberCube Services Pvt. Ltd., I lead PCI DSS, SOC 2, and ISO 27001 compliance assessments for fintech and enterprise clients. I evaluate control gaps and prepare prioritized remediation plans.

I also author PCI DSS compliance reports, SOC 2 readiness reports, and ISO 27001 Statements of Applicability, presenting remediation roadmaps to client senior leadership.

Previously, at Surepass Technologies Pvt. Ltd., I implemented SOC 2 and ISO 27001 controls and established a third-party risk management program. I hold ISO 27001 and ISO 42001 Lead Auditor certifications.

Experience

Work history, roles, and key accomplishments

Current

Associate Consultant

Current

CyberCube Services Pvt. Ltd.

Aug 2025 - Present (1 year 2 months)

Led end-to-end PCI DSS, SOC 2, and ISO 27001 compliance assessments for 40+ fintech and enterprise clients, achieving full audit readiness. Authored compliance reports and presented remediation roadmaps to client leadership.

PCI DSS SOC2 ISO 27001 PCI SSF Risk Assessment Gap Analysis Control Testing Compliance Reporting Compliance Attestations Statement Of Applicability Security Policies

IT Consultant

Surepass Technologies Pvt. Ltd.

Feb 2025 - Aug 2025 (6 months)

Implemented SOC 2 and ISO 27001 controls and established a Third-Party Risk Management program from the ground up. Conducted internal audits and readiness assessments, documenting gaps and developing corrective action plans.

SOC2 ISO 27001 Third Party Risk Management Internal Audit Risk Assessment Corrective Action Plans

Information Security Trainee

Global Tech and Information Security Pvt. Ltd.

Sep 2024 - Feb 2025 (5 months)

Supported PCI DSS, ISO 27001, SOC 2, and GDPR compliance initiatives across client engagements, assisting in risk assessments, gap analyses, and internal audits. Contributed to audit preparation and authored compliance report inputs.

PCI DSS ISO 27001 SOC2 GDPR Risk Assessment Gap Analysis Internal Audit TPRM Policy Development Evidence Collection Control Mappings

Field Trainer

WizKlub Pvt. Ltd.

Nov 2022 - Sep 2023 (10 months)

Managed client relationships and delivered structured training programs across multiple accounts, developing stakeholder communication and presentation skills. Coordinated with cross-functional teams to plan and execute training programs.

Customer Relationship Management Training Delivery Stakeholder Communication Presentation Skills Project Management

Software Developer Trainee

Valuefirst – A Twilio Company

Mar 2022 - Aug 2022 (5 months)

Developed software in C/C++ on Linux and applied Secure SDLC practices to prevent common vulnerabilities. Collaborated with senior developers to design and document API integrations in adherence with SDLC standards.

C C++Linux Secure SDLC Code Review API Integration SDLC