Job Search Status
Open to workDesired Job Title
Compliance AnalystCompliance SpecialistWork Type
Full TimeContract WorkLocation Preference
On-SiteRemoteHybridLocation: Bengaluru, Karnataka
Open to relocation: Yes
Open To Work
Verified
This profile is verified using an email address.
MANAS MAHESH
Bengaluru
Work Preference
Summary
IT Compliance professional experienced in user access certifications/reviews, IT controls, audit support, and compliance program management. Managed 252 User Access Reviews, 93 Standard Operating Procedures, and 19 Monthly Change Reviews while driving automation, data analysis, and process improvements. Experienced in SOX, SOC 1, SOC 2, ISO 27001, PCI, and HIPAA compliance environments.
Overview
2004
2004
years of post-secondary education
22
22
years of professional experience
Work History
Compliance Specialist
Avalara
05.2024 - 08.2026
- Managed 252 User Access Certifications/Reviews (UARs), 93 Standard Operating Procedures (SOPs), and 19 Monthly Change Reviews (MCRs) across applications supporting SOC 1, SOC 2, and ISO 27001 compliance.
- Performed quality checks and reconciled access-review data with HR data, identifying discrepancies to ensure accuracy and completeness of compliance records.
- Collaborated with application teams to resolve incomplete reviews and access discrepancies.
- Trained teams on UAR, SOP, and MCR processes, including access validation, excessive/high-risk access, least privilege, access hygiene, remediation, deprovisioning, documentation, and completion requirements.
- Created and managed JIRA epics and tasks, tracked progress, reviewed evidence, investigated discrepancies, and addressed anomalies and gaps to ensure compliance integrity.
- Onboarded new applications and offboarded deprecated applications based on Internal Audit and application-team inputs and supporting evidence.
- Worked with the development team on SailPoint configuration to standardize and simplify compliance activities.
- Identified and implemented automation and process improvements, enhancing training and stakeholder communication to streamline compliance efforts.
- Created a Glean agent using Claude for automated UAR quality checks and metrics covering review initiation, terminated-user access, final user-list submissions, and documentation status.
- Used ChatGPT and prompt design to process HR files and flatten reporting hierarchies for escalation purposes.
- Tools: JIRA, Confluence, SharePoint, SailPoint, Excel, SQL, PowerPoint, Tines, n8n, Claude, Glean, ChatGPT
Compliance Senior Analyst
Infosys
11.2014 - 05.2024
- Managed quarterly user access reviews (QUARs) supporting SOX, PCI, and HIPAA compliance, including planning, kickoff meetings, timelines, and status tracking.
- Partnered with application teams to identify and address documentation and access-review gaps, ensuring timely completion of compliance requirements.
- Partnered with application teams to identify documentation and access-review gaps and drive timely completion.
- Conducted quality checks and reconciled access-review data with HR data to identify discrepancies, enhancing data completeness and accuracy.
- Developed internal automation for email notifications, weekly review statistics, completeness checks, and Group ID renewal status.
- Supported the transition toward auto-provisioning to reduce manual access-review effort for larger applications.
- Merged GRC databases to create a compliance dashboard for leadership, increasing visibility into compliance status.
Security Anchor
Infosys
Bengaluru
09.2020 - 09.2022
- Coordinated vulnerability assessments for Nordstrom offshore and nearshore centers, identifying and mitigating security risks to enhance overall security posture.
- Coordinated Infosys External SOC 1 and Internal Audits for Nordstrom offshore and nearshore development centers, ensuring compliance with security standards.
- Conducted data privacy audits across multiple countries, supporting GDPR compliance and reinforcing data protection practices.
- Nordstrom Account
Project Manager - Production Support
Infosys
10.2013 - 11.2014
- Coordinated work planning, estimates, tracking, risk identification, and daily operations for team of 8, enhancing support for retail software applications.
- Developed monthly reports and management presentations; monitored productivity to identify actionable improvement opportunities.
- Facilitated resource planning, hiring, training, conflict resolution, and performance feedback, fostering team development and cohesion.
- Managed Mondelez International account operations.
Team Lead - Configuration Management
Infosys
08.2011 - 10.2013
- Led team activities, mentoring, and work assignments; reviewed deliverables and coordinated testing and troubleshooting to enhance release planning and implementation processes.
- Managed Nordstrom account operations
- Technology: ASP.NET 4.0, TFS 2010
Team Lead - Point of Sales Project
Infosys
08.2010 - 08.2011
- Developed CRM tool for Point of Sales team; managed work assignments, build planning, code reviews, delivery, troubleshooting to enhance team workflow.
- Nordstrom Account
- Technology: ASP.NET 4.0, MVC3, C#, JavaScript, jQuery, Telerik, TFS 2010
Programmer Analyst / Team Lead
Infosys
05.2007 - 08.2010
- Led design and contributed to development, testing, and UAT for supply-chain projects; supported web development and production support initiatives, including requirements analysis, troubleshooting, and performance improvements.
- Developed software solutions using Java and Python for client projects.
- Collaborated with cross-functional teams to gather requirements and design systems.
- Conducted code reviews to ensure quality and adherence to standards.
Software Engineer
Infosys
05.2005 - 04.2007
- Developed web applications and internal tools for American Express and Nordstrom, executing development, unit testing, documentation, and code reviews to enhance database functionality.
- Developed software applications using Java and Python for client projects.
- Collaborated with cross-functional teams to gather project requirements and specifications.
- Conducted code reviews to ensure quality and maintainability of software solutions.
Technical Trainee
Goodlass Nerolac Paints Limited
06.2004 - 12.2004
- Analyzed customer requirements, prepared paint samples, tested properties, and documented formulations to support development in Automotive Paints R&D.
- Assisted in quality control inspections of paint products and raw materials.
- Operated machinery for mixing and processing paint formulations efficiently.
- Maintained cleanliness and organization of work areas to ensure safety standards.
Education
B.Tech. - Paint Technology
Harcourt Butler Technological Institute
Kanpur, IndiaAccomplishments
- Process improvements and guidance contributed to the Nordstrom account receiving no qualified SOX compliance opinion after a qualified opinion in 2014.
- Won the American Express Vendor Partnership Excellence Award in 2005.
Timeline
Compliance Specialist
Avalara
05.2024 - 08.2026
Security Anchor
Infosys
09.2020 - 09.2022
Compliance Senior Analyst
Infosys
11.2014 - 05.2024
Project Manager - Production Support
Infosys
10.2013 - 11.2014
Team Lead - Configuration Management
Infosys
08.2011 - 10.2013
Team Lead - Point of Sales Project
Infosys
08.2010 - 08.2011
Programmer Analyst / Team Lead
Infosys
05.2007 - 08.2010
Software Engineer
Infosys
05.2005 - 04.2007
Technical Trainee
Goodlass Nerolac Paints Limited
06.2004 - 12.2004
B.Tech. - Paint Technology
Harcourt Butler Technological Institute
Primary Skills
- IT Compliance
- User Access Certification/Reviews
- Access Governance & Least Privilege
- SOX
- SOC 1
- SOC 2
- ISO 27001
- PCI
- HIPAA
- Internal Audit Support
- Compliance Operations
- Change Management
- Process Improvement
- Automation
- AI-Assisted Process Improvement
- Stakeholder Management
- Root Cause Analysis
Secondary Skills
- Project Management
- Training
- Vulnerability Assessment
- GDPR / Data Privacy Audits
- Production Support
- Configuration Management
- ASP.NET
- C#
- JavaScript
- JQuery
- MVC
- TFS
Tools And Technology
- JIRA
- Confluence
- SharePoint
- SailPoint
- Excel/VBA
- SQL
- PowerShell
- PowerPoint
- Tines
- N8n
- Claude
- Glean
- ChatGPT