ANSHUL GUPTA
Chandigarh,CH
Summary
Results-driven Risk & Compliance Specialist adept at designing and executing enterprise-wide risk mitigation strategies that safeguard critical infrastructure and maintain strict regulatory alignment. Blends advanced analytical rigor with persuasive stakeholder management to implement NIS2 requirements, streamline compliance audits, and eliminate exposure gaps across cloud and supply chain environments. Demonstrated success in transforming complex legal registers into structured, scalable frameworks that drive operational resilience and continuous improvement.
Overview
11
11
years of professional experience
3
3
Certification
Work History
Senior Associate Consultant
PricewaterhouseCoopers Services LLP
06.2022 - 08.2024
- Interacted with team and clients to develop and coordinate project requirements and workflow.
- Provided expert advice on industry trends and best practices, positioning clients for success in competitive markets.
- Collaborated with cross-functional teams to identify opportunities for process improvement and implement changes.
- Assessing efficacy of IT system controls in both design and operation. Producing high-quality deliverables aligned with audit plan execution and other project requirements.
- Establishing meaningful client relationships through active engagement and networking efforts during client engagements.
- Enhanced client satisfaction by providing tailored solutions and personalized guidance throughout consulting process.
- Managed multiple projects simultaneously, ensuring all deadlines were met while maintaining high-quality work standards.
- Managed projects using holistic thinking, resolved key strategic challenges and delivered projects against tight deadlines.
- Mentored junior consultants to develop their skills and advance their careers within organization.
IT Audit & Compliance Consultant
Getronics Solutions India Pvt. Ltd.
01.2020 - 06.2022
- Collaborated with executive leadership to establish and monitor Cyber Security policies and procedures.
- Provide guidance on Cyber Security best practices and support development of corporate governance structures.
- Monitor and report on key risk indicators, providing regular updates to relevant stakeholders.
- Stay abreast of relevant laws, regulations, and industry standards affecting organization’s Cyber Security
- Develop and maintain compliance program to ensure adherence to legal and regulatory requirements.
- Conducted internal audits and assessments to verify compliance with Cyber security policies and procedures.
- Collaborate with IT, legal, and other relevant teams to address technology and Cyber security compliance requirements.
- Provided support in external security audits, SOC2 Audits.
- Provided support in filling Standardized Information Gathering (SIG) Questionnaire shared by clients.
- Evaluated third-party vendors for compliance risks, mitigating potential exposure to legal liabilities.
- Conducted thorough audits of internal operations, identifying areas for improvement and recommending corrective actions.
- Conducted regular reviews of existing policies and procedures, ensuring continued alignment with evolving industry standards and best practices.
- Improved compliance processes by conducting comprehensive risk assessments and implementing internal controls.
- Reviewed, revised and updated compliance policies and procedures to confirm continual compliance with applicable laws.
- Implemented improvement initiatives and developed compliance testing program to monitor and identify gaps in new and existing practices.
- Managed practical action plans to respond to audit discoveries and compliance violations.
- Developed and maintained system for tracking and reporting compliance violations.
IT Security Analyst
FIS Global Business Solution India Pvt. Ltd.
01.2017 - 12.2019
- Collaborated with executive leadership to establish and monitor Cyber security policies and procedures.
- Provide guidance on Cyber security best practices and support development of corporate governance structures.
- Monitor and report on key risk indicators, providing regular updates to relevant stakeholders.
- Stay abreast of relevant laws, regulations, and industry standards affecting organization’s Cyber security.
- Develop and maintain compliance program to ensure adherence to legal and regulatory requirements.
- Conduct risk assessments to identify and evaluate potential threats to organization's IT system.
- Develop remediation strategy to address identified risks.
- Contributed to improve firm's overall Cybersecurity practice priorities and aspirations.
- Work closely with departments across organization to promote culture of compliance and risk awareness.
- Collaborate with IT, legal, and other relevant teams to address technology and cyber security compliance requirements.
- Provided support in external security audits.
- Provided support in filling Standardized Information Gathering (SIG) Questionnaire shared by clients.
- Reviewed third party questionnaire shared by supplier management team.
Consultant- IT Audit & Compliance
Getronics Sollutions India Pvt. Ltd.
08.2024 - Current
- Directed collaboration with executive leadership to establish, implement, and refine robust cybersecurity policies, procedures, and governance frameworks.
- Delivered strategic oversight on cybersecurity best practices, maintaining a proactive understanding of changing laws, regulations, and industry standards.
- Oversaw the creation and enhancement of enterprise compliance programs to guarantee alignment with legal, regulatory, and technological mandates. Led and facilitated internal and external security audits, including SOC2 and operational assessments, ensuring thorough planning and execution.
- Conducted assessments of third-party vendors for cybersecurity and compliance risks, effectively mitigating potential legal liabilities throughout the supply chain. Partnered with cross-functional teams across IT, legal, and operations to ensure security requirements are met and client queries, such as SIG questionnaires, are addressed.
- Executed detailed risk assessments and established internal controls to track critical risk indicators and furnish actionable insights to stakeholders.
- Developed compliance testing frameworks and instituted violation tracking systems, directing targeted action plans to resolve audit discrepancies. Supervised the continual monitoring of information security and legal obligations, propelling initiatives to rectify compliance deficiencies.
Security Analyst
Digital Self Defense InfoSec Pvt. Ltd
11.2015 - 04.2016
- Monitored use of data files and regulated access to protect secure information.
- Analyzed log files for anomalies, identifying potential intrusions or malicious activity before significant damage occurred for clients.
- Maintained up-to-date knowledge of emerging threats by attending professional development events and staying informed on industry trends.
- Coordinated incident response efforts across multiple departments, fostering teamwork in resolving complex issues effectively.
- Reduced security risks by 80% through enhancing protocols and ensuring adherence to regulations.
Education
BCA - Computer Applications
GCS Institute of Vocational Studies
Ropar. PB2013
12th - Commerce
S G G S Collegiate Public School
Chandigarh, India2009
10th -
D C Model Sr. Sec. School
Panchkula, India2007
Skills
- IT Risk Management
- Operations Management
- Problem-Solving
- Process Improvement
- Audit reporting
- Business Continuity
- Regulatory Compliance
- Standardized Information Gathering (SIG)
- ISMS Lead Auditor Certified
Certification
- ISO 27001:2013 LA
- ISO 27701:2019 LI
- ISO 27001:2022 LA
Languages
English
Upper intermediate (B2)
Hindi
Upper intermediate (B2)
Timeline
Consultant- IT Audit & Compliance
Getronics Sollutions India Pvt. Ltd.
08.2024 - Current
Senior Associate Consultant
PricewaterhouseCoopers Services LLP
06.2022 - 08.2024
IT Audit & Compliance Consultant
Getronics Solutions India Pvt. Ltd.
01.2020 - 06.2022
IT Security Analyst
FIS Global Business Solution India Pvt. Ltd.
01.2017 - 12.2019
Security Analyst
Digital Self Defense InfoSec Pvt. Ltd
11.2015 - 04.2016
BCA - Computer Applications
GCS Institute of Vocational Studies
12th - Commerce
S G G S Collegiate Public School
10th -
D C Model Sr. Sec. School