Pranay Mehta

About Pranay Mehta

My passion for cybersecurity began early, inspired by the intrigue of concepts like man-in-the-middle attacks, encryption, authentication, and authorization. This curiosity led me to pursue a degree in Computer Engineering, during which I developed a deep interest in data and cloud security. I then specialized further by earning an MS in Cybersecurity from Northeastern University and a Doctoral Certificate in Business Administration from Westcliff University.My professional journey spans nearly eight years in dynamic, high-impact roles. I began my career at Tata Consultancy Services, where I led initiatives in infrastructure security, vulnerability management, and incident response. At Cengage Learning, I contributed to shaping security policies, implementing company-wide security standards, and managing critical vulnerabilities. Currently, as a Senior Security & Compliance Analyst at Headspace, I spearhead comprehensive security and compliance programs, driving risk assessments, vendor security reviews, and security training initiatives, while managing key projects like the bug bounty program and major security audits (HITRUST, SOC 2 Type 2, and UK Cyber Essentials Plus).I thrive on the challenge of staying ahead in a fast-paced threat landscape. Beyond technical skills in risk management, cloud security, and endpoint protection, I am known for my proactive approach, innovative problem-solving, and effective communication. I’m passionate about leveraging emerging technologies and best practices to build resilient security frameworks that not only respond to threats but also anticipate them.

Experience

1. Senior Security & Compliance Analyst

   Headspace

   Mar 2025 — Present

   Completed the HIPAA Security Rule Risk Analysis using the SRA Tool v3.5, assessing sections that mapped to NIST CSF• Aligned enterprise controls to Executive Order 14028, NIST CSF 2.0, and HHS 405(d) recommendations, ensuring ongoing compliance across cloud and application layers.• Led security compliance risk reviews for new features and products before launch, proactively identifying and mitigating potential security issues.• Partnered with Engineering to accelerate remediation of critical SAST/DAST findings, integrating security tickets into fortnightly sprints.• Operationalized Security Risk Assessment outcomes across AI initiatives.

Education

• University of Mumbai

  Bachelor of Engineering - BE, Computer Engineering

  2016

• Westcliff University

  Doctoral Certificate, Business Administration and Management, General

• Northeastern University

  Master of Science - MS, Cybersecurity

  2019 — 2020