Vidhi Gujral
Information Security Management System Analyst
Pune,MH
Summary
Information Security professional with expertise in TISAX/ENX compliance, ISMS management, ISO 27001 auditing, and IT risk management. Skilled in end-to-end TISAX assessment lifecycle, supplier risk evaluation, vulnerability management, SOC attestations, and automation testing.
Overview
2
2
years of professional experience
10
10
Professional Certificates
3
3
Bachelor of Engineering
Work History
Information Security Management System Analyst
Antolin
Pune, MH
09.2025 - Current
- Managed end-to-end TISAX 3-step process (Registration, Assessment, Exchange) on the ENX portal; maintained scope IDs, contact assignments, assessment objectives (Confidential, High Availability, Prototype Protection, GDPR) and AL2/AL3 classification.
- Aligned assessment scopes with the VDA ISA catalogue (ISO/IEC 27001); monitored ISA version updates and coordinated internal
control changes to maintain compliance. - Coordinated with ENX-accredited TSPs for AL2 (remote) and AL3 (on-site) audits; prepared evidence packages, stakeholder interview schedules, and site documentation; managed TISAX label validity over 3-year cycles.
- Led end-to-end information security risk management per ISO 27001 — risk identification, BIA, threat modelling, risk register maintenance, and quarterly reporting to senior management.
- Conducted third-party supplier risk assessments enforced NDA adherence, data classification compliance, incident notification obligations, and right-to-audit provisions.
- Coordinated internal ISMS audits and acted as primary liaison for external audits; tracked CAPs with root cause analysis and effectiveness verification; prepared management review reports and KPI dashboards.
Software Engineer
FareIntelligence Solutions Pvt . Ltd
Pune
07.2024 - 09.2025
- Supported SOC 1 and SOC 2 (Type I & II) attestations through evidence collection, control testing, and audit reporting.
- Assisted in ISO 27001 gap analysis, policy drafting, and conducted Information Security awareness training; contributed to qualitative
risk assessments, identified risks, and proposed controls. - Executed quality-focused testing using Selenium WebDriver and Postman for multiple airline-sector engagements, ensuring alignment
with internal compliance and assurance standards. - Documented test incidents, supported business continuity discussions, and proactively tracked/escalated dependencies impacting test
activities.
Automotive Embedded System Intern
NeuAl Labs
Pune
10.2023 - 04.2024
- Designed embedded system prototypes using simulation software and hardware platforms.
Python and Machine Learning Intern
Mass Technologies Simplifying IT
Pune
02.2023 - 04.2023
- I contributed to two key projects: In Crop Yield Prediction, I used Python and machine learning to develop models for predicting crop yields.
- In the Mental Health Tracker project, I helped create a personalized tool to monitor emotional well-being and stress levels, using Python, machine learning, and SQLite.
- Researched new methods of machine learning to stay up-to-date with industry trends.
Education
Bachelor of Engineering - Electronics & Telecommunication
Smt. Kashibai Navale College of Engineering
Pune 06.2021 - 04.2024
Diploma - Computer Technology
SNJB Shri Hiralal Hastimal Jain Brothers Polytechnic College
Chandwad, Nashik 06.2019 - 05.2021
XII (HSC) - Science
Shriman P.D Surana Science Arts & Commerce Junior & Senior College
Chandwad, Nashik 06.2017 - 04.2019
X (SSC) -
SNJB's Late Shri Dhanraji Mishrilalji Bhansali English Medium School
Chandwad, Nashik 03.2016 - 03.2017
Skills
- Security & GRC
- TISAX (ENX)
- VDA ISA
- ISO 27001
- SOC 1/2
- ISMS
- GDPR
- BCP
- PCI Compliance
- Type 1
- Type 2
- Documentation
- Compliance Risk & Audit
- Risk Register
- Business Impact Analysis
- Threat
- Internal/External Audit
- CAPA
- Supplier Risk Assessment
- Risk Management
- Asset Management Testing & Tools
- Zscalar
- Buyone
- Qualys
- Selenium WebDriver
- Postman (API Testing)
- JIRA, Bugzilla
- GRC Tools Programming & Data
- Python
- SQL
- Network Security
- Excel
ADDITIONAL PROJECTS
Mental health tracker (final year project)
Team size: 4| Tools: Python, Machine Learning, SQLite, Spyder
- Built a personalized mental health tracking application to monitor mood patterns, stress levels, and coping strategies using ML models.
- Incorporated secure local data storage using SQLite, with consideration for data encryption, and privacy protection.
- Followed cybersecurity fundamentals, including data confidentiality, access control, and secure input handling, to safeguard sensitive user information.
Crop Yield Prediction
Team Size: 4 | Tools: Python, Machine Learning, Data Analytics
- Developed a machine learning model to predict crop yields based on historical and environmental data.
- Performed data cleaning, feature engineering, and model evaluation using regression algorithms.
- Ensured secure handling of agricultural datasets by applying basic data protection practices and maintaining integrity during processing.
Certification
- Deloitte Australia cyber job simulation on Forage
- Deloitte Australia data analytics job simulation on Forage
- Deloitte Australia - Technology job simulation on Forage
- Networking Basics Course, Cisco
- Cybersecurity virtual internship, IBM Skills Build, Edunet Foundation
- Cybersecurity fundamentals
- Voices of security
- Automation testing using Selenium, Seed Infotech, Nashik
- CSI Regional IT Quiz Competition, Computer Society of India, Nashik
- Python course completion, SoloLearn
Hobbies and Interests
- Dancing
- Volley Ball
- Travelling
- Writing Poetry
Personal Information
Languages
English
Hindi
Marathi
Punjabi
Timeline
Information Security Management System Analyst
Antolin
09.2025 - Current
Software Engineer
FareIntelligence Solutions Pvt . Ltd
07.2024 - 09.2025
Automotive Embedded System Intern
NeuAl Labs
10.2023 - 04.2024
Python and Machine Learning Intern
Mass Technologies Simplifying IT
02.2023 - 04.2023
Bachelor of Engineering - Electronics & Telecommunication
Smt. Kashibai Navale College of Engineering
06.2021 - 04.2024
Diploma - Computer Technology
SNJB Shri Hiralal Hastimal Jain Brothers Polytechnic College
06.2019 - 05.2021
XII (HSC) - Science
Shriman P.D Surana Science Arts & Commerce Junior & Senior College
06.2017 - 04.2019
X (SSC) -
SNJB's Late Shri Dhanraji Mishrilalji Bhansali English Medium School
03.2016 - 03.2017