zaid shaikh

Leading VAPT engagements across web, mobile, and API surfaces and driving remediation of critical and high-risk vulnerabilities. Coordinating CASA certification and contributing to an emerging AI governance programme.

Led end-to-end ISO 27001:2022, ISO 27701, SOC 2 Type 2, GDPR, and CCPA compliance, managing ISMS and continuous audit readiness. Conducted PIAs and supported ISO 27001:2022 transition, vendor risk assessments, and compliance posture reporting.

Owned end-to-end SEBI CSCRF compliance within a 3-month certification window. Led VAPT and threat modelling, implemented Wazuh SIEM detection rules, and drafted core security policies while managing audits and vendor risk assessments.

Delivered ISO 27001:2013 and SOC 2 Type 2 certification work across multiple business units, managing evidence and non-conformity resolution. Completed 20+ risk assessments and VAPT engagements, supported GDPR enforcement, and mentored junior analysts.

Secured multiple platforms across web and mobile surfaces through mobile security assessments and SAST/DAST scanning. Partnered with DevSecOps to implement CI/CD security gates and Secure SDLC workflows, and supported patch verification and incident response simulations.

Coordinated ISO 27001, SOC 2, and GDPR evidence packs for consecutive successful certifications. Conducted VAPT, infrastructure reviews for Linux/Windows environments, operated SIEM platforms, enforced CIS benchmarks on cloud infrastructure, and improved application security controls (SPF/DKIM/DMARC and HTTP security headers).

Delivered VAPT and penetration testing services for enterprise clients, including Gulf-region accounts. Supported MDR activities with endpoint protection and log analysis, and executed phishing simulations and security awareness campaigns.

Earned a B.E. in Electronics & Telecommunication from Walchand Institute of Technology, Solapur, graduating in December 2018.