Sayali Borse

About Sayali Borse

Compliance Research Analyst with 5+ years of experience designing and implementing enterprise security controls and compliance policies. Expert in developing Qualys Policy Compliance content, remediation scripts (Python, Bash, PowerShell), and security baselines aligned with CIS Benchmarks, DISA STIGs, NIST SP 800-53/CSF, SCF and MITRE ATT & CK. Skilled at mapping controls to ISO 27001/PCI/HIPAA, automating compliance checks into CI/CD pipelines, and supporting ISMS implementation and audit readiness across Linux, Windows, virtualization and database platforms.

Experience

1. Compliance Research Analyst at Qualys

   Qualys

   Apr 2021 — Present

   Led creation and implementation of Qualys Policy Compliance controls across multiple technology domains (operating systems,databases, applications, network devices, web servers, hypervisors)• Authored control statements, rationales, and remediation scripts; assigned control categories and criticality levels aligned withNIST SP 800-53 and other industry standards• Developed and configured out-of-the-box compliance policies in Qualys, incorporating technical standards and hardeningguidelines (CIS Benchmarks, DISA STIGs, Microsoft Baselines) and regulatory requirements (PCI-DSS, DORA, NIST, etc.)• Customized security baselines and policy content to meet customer-specific requirements, ensuring tailored compliance solutionsfor enterprise clients• Validated and tuned policy controls from auditors’ and clients’ perspectives, testing various configuration scenarios to ensureeffectiveness and alignment with audit expectations• Mapped Qualys controls to multiple frameworks (ISO 27001/27002, HIPAA, PCI-DSS, SOX, GLBA, CIS Controls) to streamlineevidence collection and simplify compliance reporting• Applied the MITRE ATT & CK framework to control development, ensuring coverage of key adversarial tactics, techniques, andprocedures• Researched emerging technologies and conducted compliance gap analyses on customer environments, designing targetedcontrol improvements (e.g. container security, cloud services)• Collaborated with development, QA, and infrastructure teams to integrate automated compliance checks into the developmentpipeline, accelerating policy deployment and improving baseline consistency.L

Education

• Savitribai Phule Pune University

  Diploma of Education, Electrical, Electronics and Communications Engineering

• Modern Education Society's College of Engineering, Pune

  Bachelor of Engineering - BE, Electrical, Electronics and Communications Engineering

  2016 — 2019

• Centre for Development of Advanced Computing (C-DAC)

  PG-DITISS Diploma in IT Infrastructure, Systems and Security

  2020 — 2021