Mayank Malhan

Werkstudent in der IT-Sicherheit mit Fokus auf AWS Cloud Security und Compliance. Entwicklung der AWS-Härtungsstrategie im Rahmen einer bankweiten Initiative zur Reduzierung der Angriffsfläche; Rollout der Security-Baseline (CIS v5.0, AWS FSBP, NIST SP 800-53) über 63 AWS-Accounts per Terraform. Mitaufbau eines zentralen Entscheidungsregisters für Security-Hub-Findings, Mitwirkung an einem CNAPP-Proof-of-Concept sowie DORA-Gap-Analyse kryptografischer Kontrollen.

Engineered innovative solutions to automate manual compliance processes by developing an Azure policy FAQ chatbot,while streamlining identity access management (IAM) through Azure AD and ServiceNow workflows to scale security controls. Demonstrated security controls against global regulatory standards by executing gap assessments for ISO 27001:2022 and PCI-DSS v4.0. Collaborated with stakeholders to design and implement critical policies for Cloud Security and Data Retention.

Automated traditionally manual infrastructure processes using Python and AWS Lambda, driving continuous improvement and operational scale. Deployed core AWS components (EC2, IAM) to establish foundational security controls, configuring CloudWatch to continuously monitor performance and system readiness.