Sanket Deore

About Sanket Deore

Aspiring Governance, Risk, and Compliance (GRC) professional with a strong technical foundation in cybersecurity and forensics. Eager to contribute to robust security frameworks and compliance initiatives. With a solid background in networking, Linux, and security testing, I have experience in risk assessments, cyber investigations, and vulnerability testing.I\'m an ISO/IEC 27001 certified professional with foundational awareness of NIST CSF and introductory knowledge of PCI DSS, with a strong learning mindset to grow in SOC reporting, IT controls, and compliance frameworks. My practical experience includes conducting vulnerability assessments on websites and participating in manual and automated penetration testing. During my internship at the Cyber Police Station, I assisted in cybercrime investigations, streamlined forensic workflows, and provided cybersecurity training. My skills include risk assessment, vulnerability testing, and incident response, with hands-on experience using tools such as Nessus, Nmap, BurpSuite, and OWASP ZAP.

Experience

1. Information Security Officer

   Datamatics

   Dec 2025 — Present · Nashik, IN

   Conducted periodic desktop audits and internal audits to ensure compliance with ISO/IEC 27001 controls.• Supported ISMS implementation, operation, and maintenance, including documentation, evidence management, and periodic reviews.• Performed risk assessments, security audits, and compliance checks across systems, users, and processes.• Monitored and analyzed security events using SIEM tools, including log review, alert triage, and escalation of suspicious activities.• Actively monitored and managed endpoint security using SentinelOne EDR, including threat detection, investigation, and response.• Tracked, monitored, and updated information security incidents, including root cause analysis and corrective & preventive actions (CAPA).• Coordinated internal and external audits and supported ISO 2700:2022 certification and surveillance audit activities.• Maintained and updated ISMS policies, procedures, risk registers, and audit records in line with regulatory and organizational requirements.• Delivering information security awareness training and maintained updated training materials for employees.• Collaborated with internal teams and external stakeholders to close audit findings and improve overall security posture.• Ensured adherence to data protection principles and information security best practices across the organization.

Education

• Sandip University

  Btech, Cyber security and forensic

• Sandip Polytechnic

  Diploma, Information Technology