Cyber Security • Information Security • Governance, Risk and Compliance
Tejas Panmand
Cyber & Information Security Professional
I connect technical security with governance, risk and assurance. My experience spans security monitoring, vulnerability management, incident response and IT operations, alongside ISO 27001, risk assessments, audit readiness and supplier assurance. I work with engineers, service owners and business stakeholders to turn technical findings into practical improvements. With an MSc in Information Security from Royal Holloway, University of London, I bring a hands-on understanding of technology and a clear focus on the risks that matter.
Experience
- Led and supported information security and IT governance across public-sector digital services, aligning controls and operational practices with ISO/IEC 27001:2022 and UK GDPR.
- Contributed to passing ISO/IEC 27001:2022 audits by maintaining evidence, validating controls and coordinating remediation.
- Worked with IT and digital teams across Microsoft 365, AWS, identity and access management, endpoint security and cloud services to identify gaps and recommend risk-based improvements.
- Implemented and maintained vulnerability scanning and security monitoring processes, prioritising findings by risk and business impact and tracking remediation.
- Supported cyber security incident response through alert and evidence analysis, technical investigations, remediation coordination and lessons learned.
- Provided security guidance on access controls, SSL certificates, hosting, SOC services, backups and disaster recovery, working with internal teams and suppliers.
- Maintained policies, procedures, risk registers, data protection records and control evidence, translating technical risks into clear business actions.
Impact Highlights
Education
MSc Information Security
Royal Holloway, University of London
January 2022 – January 2024
BSc Computer Science
Savitribai Phule Pune University
June 2018 – April 2021
Achievements
ISO 27001 audit support
Contributed to passing ISO/IEC 27001:2022 audits through evidence preparation, control reviews and remediation support.
15–20%
Approximate improvement in reporting efficiency through Python and PowerShell automation at Sencode.
15%
Reduction in technical issue resolution time through troubleshooting and support at Amdocs.
Projects
Document-grounded RAG Assistant (Course Project)
- Built a hands-on training assistant that answers questions using uploaded reference documents.
- Configured prompts and knowledge sources, then tested and refined responses with human validation.
Microsoft 365 Workflow Automation (Course Project)
- Built hands-on workflow automations as part of the Copilot Studio and AI Agents bootcamp.
- Practised translating requirements into agent actions and connected workflows, with testing and iteration.
Mobile Network Security Analysis
- Conducted security analysis across 3G, 4G and 5G mobile network architectures.
- Identified vulnerabilities in communication protocols and infrastructure.
- Proposed improvements including enhanced encryption and intrusion detection mechanisms to strengthen network security.
Penetration Testing on Simulated Virtual Machines
- Conducted vulnerability scans using Nmap, Nessus, and OpenVAS.
- Performed exploitation exercises using Metasploit and Burp Suite to simulate real-world attack scenarios.
- Produced structured penetration testing reports with remediation recommendations.
Security Awareness Campaign
- Designed and delivered a university-wide campaign to help students and staff recognise emerging cyber threats and adopt safer online practices.
- Organised interactive workshops on phishing and malware, with device security assessments and tailored recommendations.
Digital Forensics Project
- Recovered and reconstructed lost, deleted or encrypted data from storage devices as part of a digital forensics project.
- Applied evidence preservation and chain-of-custody techniques to maintain the integrity of the investigation.
Sangharsh Dhol Tasha Pathak Website
- Maintained website text, images and video content, testing across browsers and devices for a consistent user experience.
- Used GitHub for source control and collaboration, with proactive monitoring to support website reliability.
Certifications and Trainings
Google Cybersecurity Professional Certificate
Issued: September 2024
ISO/IEC 27001:2022 Information Security Associate
SkillFront
Issued: August 2024
Information Security: Context and Introduction
Royal Holloway, University of London
Issued: March 2023
Information Security A-Z™: Complete Cyber Security Bootcamp
Udemy
Issued: Feb 2023
Certified Ethical Hacker (CEH) Training
Sysap Technologies - India
Issued: Nov 2016
Cisco Certified Network Associate Routing and Switching (CCNA) Training
Sysap Technologies - India
Issued: Nov 2016
Skills
Governance, Risk & Assurance
Security Operations
Cloud, Identity & Infrastructure
Application & Technical Security
Automation & Reporting
Communication & Delivery
Let’s connect
Pune, Maharashtra, India
https://www.linkedin.com/in/tejaspanmandOpen to opportunities in cyber security, information security, security operations, GRC, risk, compliance, assurance and IT operations.
Languages: English • Hindi • Marathi