Pratik Nandurkar

Information Security and Security Risk Assurance Consultant with 5+ years of experience in application security assessments, product security assessments, IT audits, ISO 27001 compliance, and enterprise risk management and third-party risk management across global organizations. Experienced in leading security audits, coordinating with product owners and cross-functional teams, and driving timely remediation of audit findings. Skilled in developing governance processes, performing control gap assessments, translating complex security risks into business-impact insights for both technical and non-technical stakeholders, enabling informed decision-making.

Product Security Consultant — Associate Consultant at AXA Global Business Services (AXA GBS) (2026-04 – Present)

• Collaborated with Security Champions and cross-functional product teams to embed secure practice across all products.
• Analysed security scan results (SAST, DAST, SCA) and provided actionable recommendations, clearly articulating risk severity and business impact to stakeholders.
• Identified and assessed emerging vulnerabilities, driving timely remediation and mitigation in alignment with organizational risk management frameworks.
• Performed security assessments to proactively identify potential risks in application architecture and design.
• Communicated complex security concepts effectively to both technical teams and non-technical stakeholders, ensuring informed decision-making.
• Assisted in penetration testing, third party risk management activities and validation of vulnerabilities and its remediation.
• Contributed to strengthening overall product security posture through continuous monitoring, governance, and process improvements.

Information Security Consultant — Associate 2 at PwC (PricewaterhouseCoopers) – Acceleration Center (2024-02 – 2026-04)

• Conducted Inherent risk assessments (IRA) on 500+ applications and helped application owners understand the risk factors. Performed control gap assessments (CGA) for 100+ applications as a part of the risk management of Financial crime Governance strategy for a global banking client.
• Collaborated with external auditors and internal Data/Control Owners to respond to inquiries, schedule walk-throughs, and manage fieldwork sessions.
• Prepared and delivered weekly audit status reports, highlighting open issues, remediation progress, and compliance trends for senior leadership.
• Supported post-audit reviews by maintaining detailed audit workpapers, evidence repositories, and compliance documentation to ensure audit readiness and continuous process improvement.
• Collaborated with cross-functional teams to identify control weaknesses, implement corrective actions, and strengthen the organization's information security posture through governance and awareness initiatives.

Cybersecurity Analyst at Capgemini Technology Services India Limited (2022 – 2024-08)

• Conducted Third party security assessments and audits to identify compliance gaps, recommending remediation actions to ensure regulatory adherence (GDPR, HIPAA, PCI DSS).
• Assisted in developing and implementing Third-Party Risk Management (TPRM) frameworks, conducting vendor risk assessments, and evaluating third-party cybersecurity controls.
• Contributed to Identity and Access Management (IAM) projects by assisting in the deployment and configuration of identity management systems and access control solutions.
• Managed the vendor risk register, tracking and prioritizing third-party risks based on potential impact and likelihood, and implementing risk mitigation strategies as needed.
• Provided reports to senior management detailing third-party cyber risk status, IAM updates, and emerging cyber threats.

Cloud Engineer Intern at Capgemini Technology Services India Limited (2022 – 2022)

• Supported the deployment and configuration of cloud infrastructure services across AWS, Azure, and GCP environments.
• Applied cloud security principles including IAM policies, encryption, and network security configurations.
• Troubleshooting and resolved technical issues, improving system reliability and performance.
• Collaborated with cross-functional teams to meet cloud project objectives and deliverables.

Bachelor of Engineering in Mechanical Engineering – G. H. Raisoni College of Engineering, Nagpur (2018 – 2022)