Saket Saurav

About Saket Saurav

As a dedicated Information Security Professional with an MS in Information Security, I specialize in Third-Party Risk Management, ISMS Implementation, and Cybersecurity Consulting. With over three years of hands-on experience, I have strengthened security frameworks, enhanced regulatory compliance, and mitigated risks across global organizations like Deliveroo, Splunk, and Deloitte. My expertise lies in aligning security strategies with business objectives, ensuring security is not just a compliance necessity but a strategic enabler for growth and resilience.Professional Experience Deliveroo | Senior Third-Party Security AnalystLeading third-party risk assessments, ensuring vendor compliance with ISO 27001, NIST, GDPR, and PCI DSS. Driving NIST Cybersecurity Maturity Model alignment to enhance risk-based security governance and implementing tier-based vendor security frameworks. Splunk | Information Security AnalystDeveloped and managed the Vendor Impact Inquiry Request (VIIR) Program, enhancing real-time risk visibility. Conducted vendor security risk assessments, reducing third-party security risks and strengthening compliance efforts. Deloitte | Cyber Risk ConsultantExecuted Third-Party Risk Management, GDPR implementation, and SOX compliance assessments. Contributed to ISMS implementation and cybersecurity governance, ensuring regulatory compliance and business resilience.Core Expertise & Competencies Third-Party Risk Management – Developing and implementing vendor security assessment frameworks ISO 27001, NIST CSF & GDPR Compliance – Conducting audits, assessments, and regulatory alignment Incident Response & Cyber Resilience – Designing security strategies to mitigate emerging threats Security Governance & Policy Development – Establishing robust security policies and controls Cybersecurity Awareness & Training – Leading security workshops and initiatives to drive security cultureAwards & Recognitions Splunk SPOT Award – For outstanding contributions to vendor risk management Deloitte Arjuna Award & Dot of Fame Award – For exceptional performance in cybersecurity consultingI am passionate about proactive security strategies, risk-based decision-making, and security innovation. Always open to collaborating with industry experts to drive cybersecurity excellence. Let’s connect.

Experience

1. Information Security Analyst (L3)

   Deliveroo

   Jan 2025 — Present · Hyderabad, IN

   As Third-Party Security Analyst at Deliveroo, I lead security risk assessments for third-party vendors, ensuring compliance with ISO 27001, NIST, GDPR, and PCI DSS while enhancing our Third-Party Risk Management (TPRM) framework. I play a key role in maturing Deliveroo’s third-party security processes in alignment with the NIST Cybersecurity Maturity Model, driving continuous improvements through automation, standardization, and risk-based decision-making. My responsibilities include defining and implementing tier-based security assessments, evaluating vendor security controls related to data protection, encryption, access management, and business continuity, and collaborating with internal stakeholders to address security gaps. Additionally, I contribute to strengthening vendor security governance by improving risk visibility and remediation timelines, ensuring Deliveroo’s vendor ecosystem remains secure and resilient.

Education

• University of London

  Master of Science - MS, Information Security