Suraj Ramesh Pednekar
Thane West
Overview
12
12
years of professional experience
4
4
Certifications
Work History
Risk Assessment Lead (TPRM)
Atlas Systems
02.2021 - Current
- Perform vendor third-party risk assessments to ensure client data is protected, security gaps are identified, and remediation efforts are tracked and monitored.
- Identify, assess, and continuously monitor vendors’ security postures, including but not limited to system architecture, designs, Infrastructure security, data protection lifecycle, penetration testing, software engineering practices, training, certifications, and audits.
- Conduct remote audits against vendors’ systems, policies, training, and security practices.
- Lead team in performing due diligence on third-party vendors' security assessments, reassessments, and audits.
GRC Consultant at Client - IndiaFirst Life Insurance
Sequretek IT Solutions Pvt. Ltd.
09.2020 - 02.2021
- Implements security controls, risk assessment framework, and program that align with regulatory requirements.
- Evaluate risks and develop security standards, procedures, and controls to manage risks.
- Perform User access recertification and reconciliation.
- Creating monthly information security awareness training for all departments and their users.
- In-person risk assessment/ audit for IFL critical vendors.
InfoSec SPOC (Reliance JIO Telecom Contact Center)
ASM Enterprise Solutions Pvt. Ltd.
09.2019 - 06.2020
- Lead, collaborate, and work cooperatively with co-workers within the team to successfully plan, organize, coordinate, and complete all work related to audit engagements.
- As a part of the Internal Audit Team, Responsible for Physical and environmental security.
- Identify IT control weaknesses in processes by performing a Risk Assessment and documenting the findings.
- Perform information security checklist tasks daily.
- Determines the most effective way to protect computers, networks, software, data, and information systems against any possible attacks.
Information Security Consultant (Compliance and Risk Management)
Vanaps Consulting Pvt. Ltd.
10.2017 - 09.2019
- Actively involved in understanding the business requirements and mapping the requirements of various standards (ISO 27001:2013), formulation of various information security policies and procedures with respect to the business requirements.
- Contribute to the areas where there are needs for fine-tuning of the existing processes implemented in the ISMS/IT service management to streamline any gap in the process so that compliance with the respective standards & client satisfaction is ensured, client’s requirements are met, all regulatory, legal, contractual and statutory requirement are complied with and business grows.
- Handled a team of consultants working on various client projects to ensure timely delivery of the deliverables to the clients as per the commitment.
- Conducted security audits and Vulnerability assessments of IT infrastructure for Automotive, Event Management, Telecom, and Web hosting organizations.
- Follows detailed project timelines and milestones; communicates deviations from timelines to management when identified.
Network Engineer - (Pteris Global, Project-Mumbai International Airport)
Netlink Systems and Solutions
08.2015 - 10.2017
L1 NOC Support Engineer (Support for Windows and Exchange Servers)
Zenith InfoTech Limited
03.2013 - 09.2014
Education
Bachelor of Science - I.T
Skills
Information Security
Tools Used
Nessus, Nexpose, Tenable SC, SanerNow, Wireshark, Nmap, Logic Manager, Coupa, ServiceNow, MetricStream, ComplyScore
Certification
ISO 27001:2013 Lead Auditor in-house training
Personal Information
- Date of Birth: 06/06/85
- Marital Status: Married
Skills Summary
Over 12 years of experience in IT and 7+ years in Information Security, specializing in Governance, Risk Management, Compliance (GRC), and security audits. Expertise includes ISO 27001:2013/2022, SOC 2, GDPR, and NIST SP 800-53 frameworks., Led and performed over 50+ vendor assessments for clients in the US across pharmaceutical, BFSI, and IT sectors. Hands-on with TPRM tools such as LogicManager, ComplyScore, Coupa, MetricStream, and ServiceNow., 5 years of experience as an ISO 27001:2022 Lead Auditor and SOC 2 assessor. Proficient in planning, executing, and reporting internal/external audits. Skilled in identifying security gaps, managing corrective action plans, and ensuring regulatory compliance., Implemented enterprise security controls, risk assessments, and remediation strategies aligned with business and regulatory needs. Conducted access reviews, gap analysis, data protection reviews, and policy audits., Practical knowledge of vulnerability assessments and tools including Nessus, Nexpose, Tenable SC, SanerNow, Wireshark, and Nmap. Strong foundation in infrastructure security and network device configuration (Cisco L2/L3 switches, routers, ASA firewalls)., Designed and delivered security awareness programs and technical training sessions for internal users, enhancing InfoSec maturity across departments., Led diverse teams across multiple client projects, ensuring on-time deliverables. Strong interpersonal skills with experience in stakeholder management, cross-functional collaboration, and end-user support.
Timeline
Risk Assessment Lead (TPRM)
Atlas Systems
02.2021 - Current
GRC Consultant at Client - IndiaFirst Life Insurance
Sequretek IT Solutions Pvt. Ltd.
09.2020 - 02.2021
InfoSec SPOC (Reliance JIO Telecom Contact Center)
ASM Enterprise Solutions Pvt. Ltd.
09.2019 - 06.2020
Information Security Consultant (Compliance and Risk Management)
Vanaps Consulting Pvt. Ltd.
10.2017 - 09.2019
Network Engineer - (Pteris Global, Project-Mumbai International Airport)
Netlink Systems and Solutions
08.2015 - 10.2017
L1 NOC Support Engineer (Support for Windows and Exchange Servers)
Zenith InfoTech Limited
03.2013 - 09.2014
Bachelor of Science - I.T
Similar Profiles
Srivathsan ChellamSrivathsan Chellam
Head of Cybersecurity (VP – Engineering) at Atlas SystemsHead of Cybersecurity (VP – Engineering) at Atlas Systems
RAJESH SHARMARAJESH SHARMA
Director of Sales at Atlas SystemsDirector of Sales at Atlas Systems
Sara BeckSara Beck
Content Management Writer (Contract) at Atlas Systems IncContent Management Writer (Contract) at Atlas Systems Inc
Bhakti GaonkarBhakti Gaonkar
Graphic Illustrator at Kiddopia (Paperboat Apps Pvt Ltd)Graphic Illustrator at Kiddopia (Paperboat Apps Pvt Ltd)
Lalit Vanji MahajanLalit Vanji Mahajan
Centre Head Commercial Banking Group at Axis Bank LtdCentre Head Commercial Banking Group at Axis Bank Ltd