Suchit Iyer

Associate Consultant – Risk, Compliance & Security

AXA

Orchestrated comprehensive security risk assessments across global applications, identifying critical gaps and aligning risk posture with regulatory appetites. Validated external penetration testing reports to ensure adherence to AXA's Pentest Framework and collaborated with DevSecOps to integrate security testing into the SDLC.

Risk AssessmentPenetration TestingSecurity AuditsDevSecOpsSDLCDocumentation

Independent Information Security Consultant

Consulted for US-based Healthcare and IT startups to build HIPAA and ISO27001-compliant security frameworks from scratch. Executed end-to-end VAPT for web applications and APIs, providing actionable remediation roadmaps and authored security policies and incident response plans.

HIPAAISO 27001VAPTWeb Application SecurityAPI SecuritySecurity PoliciesIncident Response

Consultant – Cyber Security

Ernst & Young (EY)

Led high-stakes Attack & Penetration Testing across databases, IT infrastructure, and cloud environments for Fortune 500 clients. Performed in-depth analysis of penetration testing results and translated technical findings into executive-level risk reports.

Penetration TestingVulnerability AssessmentCloud SecurityRisk ReportingDatabase Security

Information Security Specialist

Partnered with architects, engineers, and project managers to ensure application and infrastructure security and compliance for SOC2 and ISO27001 audits. Executed rigorous vulnerability assessments and penetration tests on infrastructure and applications.

SOC2ISO 27001Vulnerability AssessmentPenetration TestingSecurity Awareness

MSS Engineer

Performed manual validation of application and network layer vulnerabilities and developed custom WAF rules to mitigate real-time threats. Analyzed logs using ELK and other analytical platforms for troubleshooting and incident response.

WAFELK StackIncident ResponseLog Analysis