Parth Oza

About Parth Oza

Hi, I’m Parth Oza! I’m passionate about tackling security challenges at scale by building tooling, automation, and AI-driven solutions that streamline security posture, reduce manual effort and toil, and improve efficiency across the product security and compliance lifecycle Master’s in Information Management (Information Security), University of Washington, Class of 2023 ~5 years of experience at Salesforce, Copart, and EY, implementing compliance platform tooling, automated evidence collection, controls automation and monitoring, and executing IT SOX audits Interested in roles: Security GRC Audits | Compliance Automation | TPM & GRC Engineering 🤝 My leadership roles: Currently leading Guest Speaker Outreach & Planning, ISACA-Seattle Chapter | Ex-Vice-President at UW-ISACA Chapter Let’s connect to chat about GRC, compliance audits, automation, and security tooling! Reach me here or at p•••••••@uw.edu

Experience

1. Senior Analyst, Product Security Automation

   Salesforce

   Jul 2023 — Present · Bellevue, WA, US

   Drive automation with scalable tooling and agentic workflows to reduce risk and toil for Product Security and engineering partners.Leading engineering teams and customers planning sessions to define and execute release plans aligned with product security objectives, delivering key tooling initiatives across the following programs: Security Compliance Automation1. Designed a compliance automation platform to manage the audit lifecycle—scope, execution, follow-up, and findings—for ~200 security certification audits annually across ~35 products. Integrated CCF controls into audits via tooling, reducing follow-ups by ~20% and evidence requests by ~10% during the FY26 Fall cycle. Automated Evidence Collection: Automated ~30% of evidence by integrating with ~15 data sources [AWS, GitHub, etc] across ~35 products.3. Onboarded change management, access management, cloud configuration, and data deletion controls to automated control testing, providing real-time visibility into control health and operating effectiveness, improving audit readiness for ~15 compliance scopes within the Hyperforce environment. Common Controls Framework Led the design of tooling to represent the controls library, mapping compliance requirements, testing procedures, implementation guidance, and control health to deliver enterprise-wide visibility into CCF control adoption across all products. Security Risk Governance Partnered with engineering teams to build a centralized platform for managing security risks, aggregating risk signals, and streamlining assessment and remediation across ~30 clouds, giving leaders a unified view of top risks and remediation priorities.🤖 AgentsLaunched Compliance Insights Agent for enterprise-wide access to the control library, evidence, and testing guidance, and control findings to improve CCF understanding. Awards and Accomplishments-3 Spot Recognition awards-1 Security Excellence award-1 Team award-1 Individual Innovation award

Education

• Mithibai College of Arts Chauhan Institute of Science and Amrutben Jivanlal College of Commerce and Economics

  HSC, Science

  2012 — 2014

• Swami Vivekanand International School

  SSC

  2012

• University of Washington

  Master of Science - MS, Information Management

• Dwarkadas J. Sanghvi College of Engineering

  Bachelor of Engineering - BE, Information Technology

  2014 — 2018

• CFA Institute

  CFA Level 1, Finance

  2018