Vaishnavi Nandanwar

WORK HISTORY

EDUCATION

ABOUT VAISHNAVI NANDANWAR

Experienced GRC Professional | 5+ Years in Third-Party Risk Management & Cybersecurity As a Governance, Risk, and Compliance (GRC) expert with over 5 years of experience, I am passionate about helping organizations build cyber resilience, manage third-party risks, and navigate complex regulatory landscapes. With a strong foundation in Third-Party Risk Management (TPRM), Information Security, and Cybersecurity, I specialize in driving compliance with standards like ISO 27001, SOC 2 Type 2 and GDPR and ensuring robust risk mitigation strategies. Key Areas of Expertise- Vendor Risk Management & Third-Party Risk Assessments (ISO 27001, NIST, SOC 2)- Data Privacy & GDPR Compliance - Security Assessments, Vulnerability Management, and Risk Mitigation - Compliance Audits (ISO 27001, SOC 2, GDPR)- User Access Management (UAR), RBAC, and Segregation of Duties (SoD)- Security Awareness Training & Phishing Simulations - Audit & Compliance Reporting with tools like Archer, OneTrust, ServiceNow, and Mirato - Cyber Risk Management, Incident Response, and Continuous Monitoring Proven Track Record- Developed and implemented Third-Party Risk Management frameworks aligned with ISO 27001, SOC 2, and GDPR to ensure vendor compliance and security - Managed vendor due diligence, cyber risk assessments, and ongoing monitoring to mitigate third-party risks, using industry-leading tools like ServiceNow, Archer, and OneTrust - Led user access reviews and role-based access control audits (RBAC, SoD) to enforce least privilege and ensure compliance - Enhanced security posture by creating security awareness campaigns, training programs, and phishing simulations, leading to measurable improvements in employee risk awareness. Certifications & Continuous Learning- ISO 27001:2013 Information Security Management Systems Lead Auditor- ISO 27701:2019 Certified Lead Implementer and GDPR- ISO Implementation for Risk Management Why Work With Me: I bring a detail-oriented approach with strong analytical skills and a commitment to delivering results. Whether it’s developing a risk management framework, managing vendor compliance, or improving cybersecurity maturity, I focus on providing tailored solutions that meet business objectives while ensuring regulatory compliance and mitigating risks.Let’s connect if you\'re looking for a strategic partner to strengthen your organization’s cyber resilience, improve third-party risk management, and ensure regulatory compliance.