Akshit Jandial
Gurugram
Summary
Cybersecurity and Information Security professional with 2.5+ years of experience in Cybersecurity Risk Management, GRC, Technology Risk and ServiceNow IRM. Experienced in end-to-end risk management, executive risk governance, STRIDE-based threat modeling and ServiceNow process transformation, with a track record of reducing 198 open risks to 5 accepted risks and supporting a risk-management process used by 500+ users.
Overview
1
1
Certification
3
3
years of professional experience
Work History
IT Compliance Analyst 2
NCR ATLEOS
Gurugram
09.2024 - Current
- Manage ~80 active cybersecurity risks end-to-end, covering risk validation, STRIDE-based assessment, rating, treatment, acceptance, remediation tracking, evidence validation and closure.
- Reduced security-risk backlog from 198 open risks to 5 accepted risks through comprehensive risk analysis, remediation coordination, and stakeholder follow-up.
- Redesigned ServiceNow Risk Management process by translating business and security requirements into functional workflows, approvals, and reporting; collaborated with developers to deploy the process to 500+ users.
- Led monthly risk-governance meetings with Managers, Executive Directors, VPs, and EVPs, presenting risk posture, trends, and overdue remediation while addressing leadership queries and escalations.
- Support internal/external audits, control evidence reviews, security exceptions and audit findings, coordinating with Compliance, Security, Engineering and business stakeholders to drive risk remediation and closure.
Information Security Engineer 1
NCR ATLEOS
Gurugram
03.2024 - 09.2024
- Conducted 50+ security architecture and threat-modeling assessments across on-premises and cloud applications, analyzing architecture specifications, data flows, entry points, attack vectors and security controls using STRIDE.
- Collaborated with application, engineering and security teams to identify security gaps, recommend mitigation strategies and integrate architecture findings into the broader Risk Management lifecycle.
Education
Bachelor of Technology - Computer Science And Engineering
Graphic Era Deemed To Be University
Dehradun, India07-2024
Skills
- Governance, Risk & Compliance (GRC)
- Cybersecurity Risk Management
- Risk Assessment & Risk Treatment
- ServiceNow IRM
- Audit, Controls & Compliance
- Risk Governance & Executive Reporting
- Security Architecture & Threat Modeling
- Technology Risk Management
Certification
- ISC2 Certified in Cybersecurity (CC) | Certified Ethical Hacker (CEH) | Certified Network Defender (CND)| Microsoft Azure (AZ-900)
Timeline
IT Compliance Analyst 2
NCR ATLEOS
09.2024 - Current
Information Security Engineer 1
NCR ATLEOS
03.2024 - 09.2024
Bachelor of Technology - Computer Science And Engineering
Graphic Era Deemed To Be University