Vaishnavi Tandel

Managed external SOC 1 and ISO certification audits by coordinating audit activities, evidence collection, control validation, and stakeholder communication to ensure successful audit completion. Conducted third-party vendor security assessments and vendor evaluations to identify risks and support the organization's Vendor Risk Management (VRM) program. Performed enterprise risk assessments, maintained the risk register, and led organization-wide internal audits to assess compliance with information security controls, identify process gaps, and collaborate with stakeholders to implement corrective actions and strengthen the overall control environment.

Sr Infosec Analyst at ACCELYA (2024-10 – 2026-07)

• Managed external SOC 1 and ISO certification audits by coordinating audit activities, evidence collection, control validation, and stakeholder communication to ensure successful audit completion.
• Conducted third-party vendor security assessments and vendor evaluations to identify risks and support the organization's Vendor Risk Management (VRM) program.
• Performed enterprise risk assessments, maintained the risk register, and led organization-wide internal audits to assess compliance with information security controls, identify process gaps, and collaborate with stakeholders to implement corrective actions and strengthen the overall control environment.

Infosec Delivery Consultant at SCRUT AUTOMATION (2024-03 – 2024-05)

• Managed end-to-end compliance audits for SOC 2, HIPAA, GDPR, and ISO 27001, and performed quality assurance reviews of SOC 2 and ISO 27001:2022 reports to ensure adherence to industry standards.

InfoSec Analyst at PINGSAFE (2022-08 – Present)

• Spearheaded the entire SOC 2 audit process, overseeing compliance onboarding, managing the audit lifecycle, and leading the company to successful SOC 2 certification.
• Implemented organization-wide Information Security policies and procedures, ensuring the safeguarding of sensitive data.
• Conducted risk assessments to identify potential threats and vulnerabilities and implemented strategies to ensure continuous compliance.

InfoSec Analyst at TANNUM CONSULTING (2021-08 – 2022-05)

• Conducted Security Assessments and reviewed existing IT and Cybersecurity Policies for clients.
• Conducted Information Systems audits, GAP Assessments and assisted in Data localisation audit for organizations to ensure security posture and compliance with RBI guidelines and ISO 27001 standard.

Technical Sales Engineer at LIFERAY (2020-08 – 2020-11)

• First female Presales Engineer India and APAC.
• Worked on technologies like Tomcat, MySQL, XML, HTML, CSS with Liferay DXP 7.2 platform.
• Worked on Government Projects (RFP's) like NPCIL, PM JAY, NLP MARINE, SILVASSA SMART CITY.

Software Developer Intern at WEBWORKS (2020-01 – 2020-04)

• Developed, implemented, and maintained Java-based components and interfaces.

Trainee at INFINITAS TECHNOLOGY SOLUTIONS (2019-06 – 2019-12)

• Assisted supervisors, conducted research, created reports, and participated in meetings, workshops.

Bachelor of Engineering in Computer Engineering – DATTA MEGHE COLLEGE OF ENGINEERING (2016-08 – 2019-06)

Diploma in Computer Engineering – VPM'S POLYTECHNIC (2013-06 – 2016-06)