Dhara Tandel

Accomplished Information Security Manager with Expertise in ISO 27001 Standards and Strategic Security Leadership. Skilled in overseeing comprehensive audit lifecycles and enhancing organisational security practises. Adept at executing robust information security solutions and ensuring compliance with all legal and regulatory requirements.

Proficient in identifying system vulnerabilities and developing security compliance frameworks. Collaborative in integrating security measures with business strategies and managing high-stakes security projects. Committed to boosting system performance and reliability while safeguarding organisational integrity through continuous risk mitigation and security enhancements.

Information Security Auditor- Manager - Penz Limited

(2023-08)

Direct and oversee the entire audit lifecycle, from initial planning to execution and final review, to ensure thorough assessments of information security protocols. Execute and sustain robust information security solutions in compliance with ISO 27001 standards, enhancing organizational security practices. Maintain adherence to all relevant legal and regulatory frameworks to minimize risks and protect organizational integrity.

Strategize for the continuous enhancement of information security measures and operational security performance. Leverage frameworks like CIS Controls, NIST, GDPR, PCI Dss and Cyber Essentials to enhance security readiness and compliance. Deploy and manage security solutions on Microsoft Azure, optimizing cloud security and infrastructure resilience.

• Achieved consistent compliance with ISO 27001 standards, enhancing the organisation's security framework and regulatory stature.
• Developed strategic recommendations that drove significant improvements in security practises and performance metrics.
• Implemented solutions aligned with the Cyber Essentials scheme to fortify security postures against common cyber threats.
• Integrated NIST cybersecurity framework practices to refine risk management processes and response strategies.

Information System Auditor - Penz Limited

(2021-11 - 2023-08)

Performed comprehensive evaluations of IT general controls to assess compliance with relevant regulations and industry standards. Led internal audits that provided detailed risk analysis and identified opportunities for improvements in compliance and security practises. Enforced strict compliance with legal and industry standards, protecting the company against potential risks.

• Identified critical vulnerabilities and implemented strategic solutions to enhance system security and compliance.
• Spearheaded audits that resulted in actionable insights, significantly strengthening internal security controls and compliance.

Information Security Consultant - Penz Limited

(2020-03 - 2021-11)

Conducted security assessments to pinpoint vulnerabilities in new and existing systems, fostering ongoing security enhancements and risk mitigation. Developed and implemented comprehensive security compliance frameworks to ensure adherence to company policies, industry standards, and external regulations. Collaborated with cross-functional teams to integrate security measures into new projects and initiatives.

• Formulated and deployed a security compliance framework that became a standard for ensuring continuous adherence to evolving security regulations.
• Championed the integration of robust security practises into project management processes, markedly reducing security risks across new initiatives.

Information Security Consultant - KPMG

(2018-01 - 2020-03)

• Conducted IT security risk assessments and compliance audits to ensure adherence to ISO 27001, GDPR, and PCI DSS standards.
• Developed security policies and procedures to enhance organizational resilience against cyber threats.
• Assisted in security incident response and vulnerability management, reducing security risks by implementing proactive measures.
• Led security awareness training, improving compliance and reducing security incidents.
• Streamlined security operations and collaborated with stakeholders to align IT compliance with business objectives.

Security Analyst - Debenhams PLC

(2014-04 - 2018-01)

Led security initiatives across multiple projects to align with the company's cybersecurity objectives and business goals. Managed the execution of security-related projects, ensuring the timely achievement of milestones and adherence to security policies. Collaborated with stakeholders to integrate security measures into business strategies, ensuring secure and compliant project outcomes.

• Directed multiple high-stakes security projects, ensuring their alignment with strategic business objectives and comprehensive policy compliance.
• Strengthened stakeholder relationships by consistently delivering secure solutions and aligning with overarching security and business goals.

Master's degree - Computer Science with Cyber Security - University of York (2024)

Oxford Fintech Programme - Said Business School, University of Oxford (2018)

Pre-master's - International Business - London Metropolitan University (2008)

Specialization - Wharton Business Analytics - University of Pennsylvania