Sandesh Ayare

About Sandesh Ayare

With nearly 8 years of experience in IT Audit and Risk Management, I bring a deep understanding of information security principles and a proven ability to align security controls with business objectives. My work has consistently focused on enhancing organizational security posture through rigorous audit practices, risk assessments, and compliance initiatives.Certified in ISO 27001, I have a strong foundation in governance frameworks and security standards, with hands-on expertise in Identity & Access Management (IAM), application security, and data protection. I specialize in identifying control gaps, mitigating risks, and advising on practical, scalable security improvements.Currently aiming to transition into a focused role as an Information Security Consultant, where I can leverage my audit background to build secure, compliant, and resilient systems. I’m passionate about staying ahead of evolving threats and continuously improving enterprise risk strategies.Let’s connect if you’re looking for a GRC professional who bridges audit and cybersecurity with insight and impact.

Experience

1. Senior Analyst - Information & Cyber Security

   WTW

   May 2025 — Present · Mumbai, IN

   Information Security & Risk Management- Engage in global security consultancy and project risk assessments using One Trust tool- Collaborate with cross-functional teams to implement robust security frameworks - Conduct in-depth risk evaluations, aligning controls with industry standards and emerging threats - Maintain corporate project risk management trackers and documentation - Analyze security reports to identify vulnerabilities and recommend solutions Information Security Advisory & Compliance- Provide guidance on security requirements for projects and business inquiries through ServiceNow tool- Ensure compliance with internal security controls and regulatory frameworks - Deliver risk statements and approval advice for project compliance assessments Third-Party Security Contract Reviews- Review, draft, and revise contractual agreements to align with security best practices - Support supplier risk management processes in relation to contractual agreements - Collaborate with legal, procurement, compliance, and risk teams to ensure adherence to security obligations

Education

• Vidyalankar Institute of Technology, Mumbai

  Bachelor of Engineering (BE), Computer

  2012 — 2016

Skills

• Data Coding
• Microsoft Office