Sapna
linkedin.com/in/sapnasin03/ | Greater Noida
Summary
Cybersecurity professional with experience in risk assessment, security compliance, and control implementation across PCI DSS, ISO 27001, SOC 2. Skilled in threat and vulnerability analysis, incident response support, and security monitoring workflows, with a strong foundation in GRC and cloud security (AWS, Azure, GCP).
Overview
1
1
year of professional experience
1
1
Certification
Work History
Information Security Auditor & Consultant
CyberSigma Consulting Services
Noida
12.2024 - Current
- Improved the security posture of 30+ organizations by identifying critical control gaps, prioritizing remediation, and validating closure of high-risk findings.
- Implemented and strengthened security controls across client infrastructure (network, cloud, and access governance), aligning remediation with SOC monitoring and incident response workflows.
- Ensured audit readiness for PCI DSS, ISO 27001, SOC 2, and GDPR by reviewing controls, mapping security practices to framework requirements, and guiding clients through audit cycles.
- Assisted in security operations by supporting incident response activities, correlating risk and vulnerability findings with threat indicators, and coordinating remediation with stakeholders.
- Assessed AWS and Azure environments to identify configuration and access risks, recommending cloud security hardening measures to improve visibility and operational resilience.
Education
B. Tech - Computer Science & Engineering, Cyber Security & Digital Forensics
Sharda University
Greater Noida, India07.2025
Skills
- Incident Response
- SIEM / Log Review Exposure (Wazuh)
- Risk Management & Threat Analysis
- Phishing Mail Analysis
- Cloud Security & Compliance (AWS/Azure)
- Endpoint Security
- Security Architecture Review & Hardening
- Governance, Risk & Compliance (GRC)
- Vulnerability Assessment
- Network Security & Access Control (IAM)
- Audit & Compliance Support (PCI DSS, ISO 27001, SOC 2)
Certification
• CC ISC2 Candidate
• GOETHE-ZERTIFIKAT B1 (German Lang.)
• GOETHE-ZERTIFIKAT B1 (German Lang.)
Research & Publications
- Isolated Malware Threat Analysis: A Custom Sandbox to Safeguard Critical Infrastructure
- Enhancing Nuclei: Non-Standard Port Breakthrough
Languages
- German, Intermediate
- English, Professional Fluency
- Hindi, Native Proficiency
Timeline
Information Security Auditor & Consultant
CyberSigma Consulting Services
12.2024 - Current
B. Tech - Computer Science & Engineering, Cyber Security & Digital Forensics
Sharda University