Sahil Nirwal

About Sahil Nirwal

Driven by curiosity and a deep interest in cybersecurity, I combine a strong foundation in full-stack development with hands-on experience in network security and vulnerability assessment. My journey includes impactful internship experience with Gurugram Police\'s Cybersecurity Summer Program (GPCSSI2025), where I engaged with industry experts on topics like ransomware, cryptography, mobile and website hacking, and real-world cybercrime investigations.I\'ve worked on real-time threat detection using tools such as Wireshark, Metasploit, and Hydra, and built systems to monitor and mitigate network attacks. Additionally, I’ve developed full-stack web applications like a Dairy Farm Management System, using Python, MySQL, and JavaScript, aimed at digital transformation for small-scale farmers.

Experience

1. Information Security Consultant

   Tensecure

   Sep 2025 — Present · Noida, IN

   Led Governance, Risk & Compliance (GRC) engagements for multiple organizations, including multi-entity environments, aligned with ISO 27001:2022 requirements.2. Developed, reviewed, and finalized information security policies, procedures, and mandatory compliance documentation.3. Designed and maintained NCCA trackers, KPI sheets, Statements of Applicability (SoA), internal audit files, and audit evidence repositories.4. Performed internal audits, risk assessments, and risk treatment (RART) to identify gaps and drive compliance readiness.5. Coordinated and supported external audits, including audit planning, evidence submission, auditor interactions, and closure of observations.6. Created ISO 27017 and ISO 27018 compliance checklists to support cloud security controls.7. Reviewed SOC 2 reports to identify control gaps, risk exposure, and compliance deviations.8. Prepared Data Flow Diagrams (DFDs) and Management Review Meeting (MRM) decks for risk visibility and leadership reporting.9. Conducted on-site compliance assessments, stakeholder interviews, and evidence collection.10. Ensured audit-ready documentation through version control, formatting, and final compliance sign-off.11. Contributed to security awareness initiatives, including monthly newsletters and internal communication.

Education

• Sri Guru Gobind Singh College Of Commerce

  Bachelor of Science - BS, Computer Science

  2021 — 2024

• Shaheed Sukhdev College Of Business Studies

  PGDCSL, cyber security and law