Summary
Overview
Work History
Education
Skills
Personal Information
Websites
Certification
Additional Information
Timeline
Generic

Ashutosh Sharma

Indore

Summary

Security & Compliance Analyst with ~4 years of experience in risk management, governance, and compliance (GRC). Played a key role in Microsoft's Compliance Manager Platform, crafting guidance for 30+ IT regulations including ISO 27001 and NIST. Skilled in enhancing data privacy and cyber risk compliance through control mapping and process optimization. Proficient in analyzing security incidents, creating actionable reports, and improving response strategies. Hands-on expertise in ServiceNow and OneTrust for risk assessments and compliance management.

Overview

4
4
years of professional experience
1
1
Certification

Work History

Security Delivery Analyst

Accenture
08.2022 - Current
  • Developed and maintained comprehensive content for Microsoft's Compliance Manager Platform, ensuring accurate and up-to-date guidance for users.
  • Enhanced compliance by ingesting and mapping controls from frameworks and standards (e.g., ISO 27001, NIST, SOC 1/2, PCI DSS, CIS Benchmarks).
  • Streamlined compliance processes through data privacy, audit, information security, security awareness, third-party risk, and incident management control mapping.
  • Validated controls for accuracy, identified changes and gaps, and reported findings to stakeholders.
  • Mapped ISO 27001 security policy/procedure-related controls to support ISO compliance readiness.
  • Provided detailed improvement guidance leveraging Microsoft solutions such as Intune, Azure AD, Microsoft Purview, M365 Defender, Teams, Endpoint, and Cloud Apps.

Security Delivery Associate

Accenture
08.2021 - 08.2022
  • Monitored network traffic, security alerts, and logs to identify potential threats.
  • Detected and analyzed security incidents (e.g., malware infections, data breaches), responded promptly by isolating systems and coordinating with IT/security teams.
  • Utilized SIEM systems, IDS, and firewalls for proactive threat detection and mitigation.
  • Documented incidents, conducted root cause analysis, and developed improvement measures.
  • Prepared detailed incident reports and presentations for management, highlighting trends and corrective actions.

Education

B.Tech/B.E. - Computer Science

Punjab Technical University (PTU)
Jalandhar
07-2021

12th Standard -

Nageshwar HS School
Indore
06-2017

10th Standard -

Jay Jyoti School
Raghogarh Guna
06-2014

Skills

  • ITGC audit and internal audit
  • Control mapping
  • ISO standards and ISO 27001
  • HIPAA compliance
  • Incident management
  • Third-party risk management
  • ServiceNow and Splunk
  • Regulatory compliance
  • NIST cybersecurity framework
  • Information security governance
  • Risk assessment and GRC processes
  • ISMS and RSA Archer

Personal Information

Title: Security Delivery Analyst

Certification

  • ISO 27001:2022 Lead Auditor
  • OneTrust Privacy Management Professional

Additional Information

Open to relocation and travel as per project needs., Actively contributes to security awareness initiatives within the organization.

Timeline

Security Delivery Analyst

Accenture
08.2022 - Current

Security Delivery Associate

Accenture
08.2021 - 08.2022

B.Tech/B.E. - Computer Science

Punjab Technical University (PTU)

12th Standard -

Nageshwar HS School

10th Standard -

Jay Jyoti School
Ashutosh Sharma