Trunal Londhe

Dynamic Security Analyst with expertise in data protection and cyber security, honed at EY GDS. Proven track record in implementing DLP policies and managing PKI operations, ensuring compliance and high availability. Strong problem-solving abilities and effective team collaboration drive continuous improvement in security processes. Committed to safeguarding organizational assets and enhancing information protection strategies.

PKI operations – EY (US client, chemical and materials domain)

Aug 2025 – present| EY

• Managing end-to-end PKI operations, including SSL/TLS certificate issuance and CSR validation
• Performing daily PKI health monitoring using PKIView and conducting CA server backups.
• Preparing operational documentation such as Operations Manual, Onboarding Guide, and Certificate Tracking Sheets.
• Supporting certificate lifecycle management and ensuring secure CA operations.
• Working on transition-related documentation and continuous improvement of PKI processes.

Migration from Trellix & Skyhigh to Microsoft Endpoint DLP & Exchange Mail

Singapore | 11/01/2024 – 05/05/2025

• Assessed existing DLP policies and configurations in Trellix.
• Migrated endpoint DLP policies to Microsoft Endpoint DLP for enhanced data protection.
• Transitioned email DLP rules from Skyhigh to Exchange Online DLP.
• Performed end-to-end testing and validation to ensure a smooth migration with minimal impact on users.

Microsoft DLP & Information Protection Implementation

Internal | 03/01/2024 – 08/31/2024

• Identified sensitive information types including financial data, PII, and health data.
• Developed baseline DLP policies to prevent unauthorized data sharing.
• Created and published Information Protection labels based on sensitivity levels.
• Configured Information Barrier and Communication Compliance policies.
• Implemented Microsoft cloud security baseline policies for critical applications.

Microsoft E5 Security (Data Security) Consulting

Philippines | 01/01/2023 – 03/31/2023

• Advised customers on DLP and Information Protection best practices.
• Customized Microsoft DLP policies according to organizational needs.
• Optimized Microsoft 365 licensing for DLP/IP requirements.
• Conducted periodic compliance assessments to ensure regulatory adherence.

Microsoft E5 Assessment

Oman Region | 02/01/2024 – 07/31/2024

• Generated comprehensive compliance reports covering data protection, access controls, and audit logs.
• Performed in-depth assessment of systems, policies, and security posture to match compliance frameworks.
• Identified gaps, risks, and areas requiring improvement and recommended corrective actions.

Microsoft DLP Operations

US | 04/01/2024 – 07/31/2024

• Defined, configured, and implemented Microsoft 365 DLP policies.
• Utilized Microsoft Information Protection for data classification and labeling.
• Monitored DLP alerts, investigated incidents, and provided remediation.
• Managed endpoint DLP enforcement across multiple user devices.
• Generated and reviewed compliance dashboards to optimize policy effectiveness.
• Reduced false positives and improved overall data protection posture.

Microsoft Presales – Security & Compliance

Various Regions | 03/01/2023 – 06/30/2024

• Created scope of work (SOW) and effort estimate documents for client engagements
• Designed security and DLP policies for customer demonstrations.
• Prepared and delivered presentations for presales, proposals, and workshops.
• Collaborated with delivery teams to define implementation timelines and technical requirement

• English, Highly proficient
• Hindi, Native speaker
• Marathi, Native speaker

Title: Data Security Consultant/Engineer