Varun Singhal

About Varun Singhal

Cybersecurity professional with 12.5+ years of international experience in developing and…

Experience

1. Manager, Compliance and Audit

   Salesforce

   Mar 2025 — Present · Gurugram, IN

   Trusted advisor to CISOs on cloud security and compliance, translating technical complexities into actionable strategies aligned with business objectives and risk tolerance. Proactively address emerging threats and regulations.• Partner with sales to accelerate deals by expertly presenting Salesforce\'s security, building confidence, and proactively mitigating security roadblocks during customer reviews.• Strategically negotiate contracts, ensuring clear security responsibilities and aligning customer obligations with global frameworks (ISO, RBI, GDPR, DPDPA) within the Salesforce ecosystem. Provide insightful implementation guidance.• Head comprehensive security audits, deeply analyzing adherence to standards (NIST CSF, SOC 2) and regulations to drive continuous improvement and proactive risk mitigation.• Oversee and coordinate in-depth application security assessments across Salesforce, collaborating with product teams to prioritize and remediate vulnerabilities throughout the SDLC, championing secure coding.• Actively engage with industry bodies, contribute to shaping regulations in AI and cloud security, and establish thought leadership through impactful conference presentations, enhancing organizational reputation.

Education

• Welingkar Institute of Management

  Master of Business Administration (M.B.A.), E-Business

  2014 — 2015

• Motivational Pathway

  Bachelor of Technology (B.Tech.), Information Technology

  2007 — 2011

Skills

• Atlassian Jira
• Itil Certified
• Payment Card Industry Data Security Standard (Pci Dss)
• User Acceptance Testing
• Database Testing
• Ibm Qradar Vulnerability Management
• Hp Webinspect
• Rfp
• Penetration Testing
• Testing
• Firebug
• Ibm Qradar Security Information and Even Management
• Web Application Security Assessment
• Nexpose
• Burp Suite
• Test Planning
• Agile Testing
• Test Automation
• Loadrunner
• Java
• Imperva
• Stlc
• Imperva Web Application Firewall
• Rfp Generation
• System Testing
• Extreme Programming
• Policy Compliance
• IT Audit
• Business Analysis
• Test Management
• Yslow
• Manual Testing
• Nessus
• Sdlc
• Nmap
• Ibm Appscan
• Black Box Testing
• Symantec Data Loss Prevention
• Quality Assurance
• Defect Tracking