Darshana Varsolkar

Oracle

May 2021 - Apr 2026 • 4.9 yrs

Ensured audit readiness across 5+ compliance frameworks including ISO 27001, SOC 1/2, PCI DSS, HIPAA, and ENS, managing and validating 100+ audit artifacts while aligning controls with audit requirements. Acted as the key liaison for 3+ external audits annually, coordinating auditor interactions, walkthroughs, evidence reviews, issue clarifications, and cross-functional stakeholder communication. Conducted risk-based ITGC control assessments across access management, change management, logging and monitoring, and governance processes to evaluate control design and operating effectiveness. Improved audit efficiency by 20–30% by streamlining evidence retrieval, structuring audit documentation, and improving communication between auditors and control owners. Coordinated audit remediation activities and tracked closure of observations, achieving ~90%+ on-time remediation across control areas. Managed and reviewed 100+ audit evidence items, SOPs, system configurations, validation documents, and operational records to ensure completeness, traceability, and compliance alignment. Maintained and periodically updated security policies, SOPs, compliance documentation, and operational procedures in line with ISO 27001 controls, regulatory requirements, and audit expectations. Supported risk assessments and governance reviews by identifying control gaps, tracking residual risks, monitoring remediation progress, and coordinating risk acceptance activities. Coordinated vulnerability remediation by tracking corrective actions, monitoring closure timelines, escalating overdue findings, and strengthening the organisation's overall compliance posture. Supported internal audit readiness and multi-framework compliance programs, driving cross-functional coordination and continuous process improvement across security and compliance operations.

Krew Instruments

Jul 2018 - May 2021 • 2.8 yrs