Aashish Vermaa profile photo 1 on Tal

Aashish Vermaa

Senior IDT Assurance Advisor – PCI at Shell | Information Security, Compliance Risk, Control Frameworks & Assurance Delivery

India

11+ years of work experience

Shell
May 20265 mosPresent

Shell
Jun 20223 yrs 11 mosApr 2026

Bengaluru, Karnataka, India

• Change Management: As a primary responsibility, I review planned IT changes to ensure minimal disruption to the landscape and adherence to ITIL standard processes. I actively participate in the Change Advisory Board (CAB), ensuring all changes are thoroughly reviewed and approved. • Compliance: I serve as the first point of assurance for IT General Control & Compliance across the Business and Planning landscape for Europe and Asia. I meticulously review control execution and evidence provided by AOMS partners, ensuring all processes align with work instructions and control designs, Issues, End of Life (EOL), and Target Operate Environment (TOE) Compliance • Vulnerability Management: In addition to my primary role, I assist leadership in managing vulnerabilities across the entire Business & Planning landscape, ensuring a secure and robust IT environment. • Organizational Initiatives: Voluntarily, I am contributing to the organization’s Brilliant Basics initiative, focusing on Risk Register & Visuals, Control Automation, and Vulnerability Management for the entire Assets SOM.
Tata Consultancy Services
Jan 20184 yrs 5 mosMay 2022

Bangalore

• Project Management (Siemens India): Oversaw end-to-end project management, ensuring timely delivery and adherence to quality standards. Handled projects valued up to $8 million, translating project demands and requirements into scope and service agreements. Ensured compliance with project methodology, policies, and Info-Sec policies. Managed financial and project information in project management tools, supporting resource transitions to operations. Projects handled included onboarding new locations, IT crisis management during the COVID-19 pandemic, data center migration, network link migration, onboarding of tools in infra services, and asset refresh & validation activities. • Transition Support (Shell): Transition Support for OSS (Onsite Support Services), ensuring seamless transitions and minimal disruptions. Transitioned the OSS support from DXC to TCS for Asia, Middle East & Europe. • Service Management Tower Lead (Shell): Led the Service Management Tower interfacing Onsite Support Services and Service Desk, overseeing operations and performance. • IT Centre Lead - Onsite (Shell): Led the IT Centre at Bangalore, ensuring efficient operations and high levels of service. Achievements: • Successfully managed multiple projects, leading to improved operational efficiency and service delivery. • Played a key role in crisis management during the COVID-19 pandemic, ensuring business continuity. • Led successful transitions and migrations, minimizing disruptions and maintaining high service levels.
Tech Mahindra
Aug 20161 yr 5 mosDec 2017

• Risk Assessment: Conducted comprehensive impact analyses and risk assessments with Technical SMEs & Application Owners, ensuring seamless communication with all relevant stakeholders. • Compliance: Demonstrated proficiency in SOC1 & SOC2 reporting, GDPR, and Legal and Regulatory Controls operations, ensuring adherence to all compliance standards. • Change Management: Managed over ~500+ Change effectively overseeing the end-to-end change lifecycle and identifying key process improvements. • Problem Management: Analysed and resolved complex problems in collaboration with technical teams, leading to a ~20% reduction in incident tickets. • Client Communication: Ensured prompt client notification of potential disruptions due to ongoing Change services, maintaining high levels of customer satisfaction. Achievements: • Successfully completed all planned activities within the scheduled time frame, improving project efficiency by 15%. • Recognized for exceptional performance and contribution with “Pat on Back” & “Bravo” awards from Tech Mahindra.
Hewlett-Packard Enterprise
Aug 20151 yrJul 2016

• Information Security & Compliance: Ensured general compliance from the HP Service management team for User Access Management, Ticket Updates on ITSM as per the defined Service Desk process, and Data Backup and Restore Policy. Performed quarterly and half-yearly reviews of application access, taking necessary action with respective stakeholders. Conducted periodic reviews of Backup and Restore policy for assigned applications, performing tests with the respective team and documenting evidence. • Change Management: Oversaw the end-to-end change management process, including managing RFCs, coordinating with various functional teams, gathering pertinent information, associating related CIs, incidents, and services to the change request, and providing regular status updates to requesters. Led the planning and implementation stages, ensuring tasks related to the change request were in progress and conducting post-implementation reviews to validate the results of the change request. Achievements: • Played a key role in Change Management within the HP Service Management Team. • Successfully supported Delivery teams during Periodic Planned Activities, leading to a 25% improvement in delivery efficiency
Oct 201411 mosAug 2015

• Client Support: Provided comprehensive technical support to clients (APEDCL, WESCO, NESCO, CESU, SOUTHCO & NORTHCO), coordinating with client coordinators for regular updates. • User Management: Handled creation, deletion, and modification of users from AD as per client requests. • Technical Troubleshooting: Provided technical and diagnostic support for all hardware, software, and network issues, maintaining overall ownership of user issues and ensuring resolution within agreed service levels. • Ticket Management: Managed calls through the Remedy ticketing tool, ensuring closure as per SLA. • Team Management: Led a team of engineers in Odisha, overseeing operations and performance. • IT Audit: Conducted IT asset audit & Application License Utilization review every alternate month, ensuring compliance and accuracy. • Connectivity Monitoring: Monitored connectivity between the local Customer Care Centre and the Central Database server, ensuring seamless data flow. • Client Representation: Represented the organization in client visits and reviews, fostering strong client relationships. Achievements: • Played a key role in the infrastructure setup in Odisha, Managing the setup without vendor support. • Led a team development process that resulted in a 70% reduction in tickets from the Odisha, 45% Reduction from Andhra Pradesh location. • Recognized for maintaining 0% downtime due to IT issues, demonstrating exceptional problem-solving and management skills.

Aashish’s AI Stack

claude
claude
openai
openai
perplexity
perplexity
Microsoft Copilot
Microsoft Copilot

Education

Bachelor of Science (BSc), Computer Science

Govt Autonoumus college, Rourkela

20103 yrs2013

Join Aashish and 10k+ other professionals on

Tal Boss

Tal is the app where bosses meet engineers & builders directly, without middlemen

Download Tal Boss

Aashish Vermaa on Tal

Headline

Senior IDT Assurance Advisor – PCI at Shell | Information Security, Compliance Risk, Control Frameworks & Assurance Delivery

About

I work at the intersection of security, compliance, and technology—helping organizations stay secure while keeping things practical and efficient. Currently, as a Senior IDT Assurance Advisor (PCI DSS), I support the security and compliance of payment environments by managing risks, strengthening controls, and ensuring alignment with evolving regulatory expectations. My focus is on making PCI assurance more effective—whether that’s through better governance, smarter tooling, or simplifying how control frameworks are implemented and sustained. With over 13 years of experience across IT operations, Service Management, and Assurance, I bring a balanced perspective of delivery and control. I understand how systems run in reality, not just on paper and that helps me design compliance approaches that actually work. Over time, I’ve worked across: - IT Controls & Risk Management (ITGC, security controls, vulnerability management) - PCI DSS Assurance & Governance (control framework, assessments, compliance reviews) - Service Operations & Transition Management - Process optimization using automation and AI-led solutions I enjoy simplifying complex compliance problems, breaking them down into practical, scalable solutions. A big part of my work involves reducing manual effort, improving visibility, and using digital tools to make compliance more “evergreen” rather than reactive. Beyond the technical side, I’m passionate about working with people across teams—security, architecture, business, and operations—to make sure compliance doesn’t slow things down but actually enables trust and scale. What I bring - Turning complex security & compliance needs into workable solutions - Building and evolving control frameworks that stay relevant - Using automation and AI to reduce effort and improve accuracy - Bridging the gap between technical teams and risk/compliance goals

Location

India

AI stack

claude

openai

perplexity

Microsoft Copilot

Work experience

Snr IDT Assurance Advisor at Shell, May 2026 - Present · 5 mos

IT Ops Lead at Shell, Jun 2022 - Apr 2026 · 3 yrs 11 mos, Bengaluru, Karnataka, India, • Change Management: As a primary responsibility, I review planned IT changes to ensure minimal disruption to the landscape and adherence to ITIL standard processes. I actively participate in the Change Advisory Board (CAB), ensuring all changes are thoroughly reviewed and approved. • Compliance: I serve as the first point of assurance for IT General Control & Compliance across the Business and Planning landscape for Europe and Asia. I meticulously review control execution and evidence provided by AOMS partners, ensuring all processes align with work instructions and control designs, Issues, End of Life (EOL), and Target Operate Environment (TOE) Compliance • Vulnerability Management: In addition to my primary role, I assist leadership in managing vulnerabilities across the entire Business & Planning landscape, ensuring a secure and robust IT environment. • Organizational Initiatives: Voluntarily, I am contributing to the organization’s Brilliant Basics initiative, focusing on Risk Register & Visuals, Control Automation, and Vulnerability Management for the entire Assets SOM.

IT Consultant at Tata Consultancy Services, Jan 2018 - May 2022 · 4 yrs 5 mos, Bangalore, • Project Management (Siemens India): Oversaw end-to-end project management, ensuring timely delivery and adherence to quality standards. Handled projects valued up to $8 million, translating project demands and requirements into scope and service agreements. Ensured compliance with project methodology, policies, and Info-Sec policies. Managed financial and project information in project management tools, supporting resource transitions to operations. Projects handled included onboarding new locations, IT crisis management during the COVID-19 pandemic, data center migration, network link migration, onboarding of tools in infra services, and asset refresh & validation activities. • Transition Support (Shell): Transition Support for OSS (Onsite Support Services), ensuring seamless transitions and minimal disruptions. Transitioned the OSS support from DXC to TCS for Asia, Middle East & Europe. • Service Management Tower Lead (Shell): Led the Service Management Tower interfacing Onsite Support Services and Service Desk, overseeing operations and performance. • IT Centre Lead - Onsite (Shell): Led the IT Centre at Bangalore, ensuring efficient operations and high levels of service. Achievements: • Successfully managed multiple projects, leading to improved operational efficiency and service delivery. • Played a key role in crisis management during the COVID-19 pandemic, ensuring business continuity. • Led successful transitions and migrations, minimizing disruptions and maintaining high service levels.

TIM Engineer (L2) at Tech Mahindra, Aug 2016 - Dec 2017 · 1 yr 5 mos, • Risk Assessment: Conducted comprehensive impact analyses and risk assessments with Technical SMEs & Application Owners, ensuring seamless communication with all relevant stakeholders. • Compliance: Demonstrated proficiency in SOC1 & SOC2 reporting, GDPR, and Legal and Regulatory Controls operations, ensuring adherence to all compliance standards. • Change Management: Managed over ~500+ Change effectively overseeing the end-to-end change lifecycle and identifying key process improvements. • Problem Management: Analysed and resolved complex problems in collaboration with technical teams, leading to a ~20% reduction in incident tickets. • Client Communication: Ensured prompt client notification of potential disruptions due to ongoing Change services, maintaining high levels of customer satisfaction. Achievements: • Successfully completed all planned activities within the scheduled time frame, improving project efficiency by 15%. • Recognized for exceptional performance and contribution with “Pat on Back” & “Bravo” awards from Tech Mahindra.

Technical Analyst at Hewlett-Packard Enterprise, Aug 2015 - Jul 2016 · 1 yr, • Information Security & Compliance: Ensured general compliance from the HP Service management team for User Access Management, Ticket Updates on ITSM as per the defined Service Desk process, and Data Backup and Restore Policy. Performed quarterly and half-yearly reviews of application access, taking necessary action with respective stakeholders. Conducted periodic reviews of Backup and Restore policy for assigned applications, performing tests with the respective team and documenting evidence. • Change Management: Oversaw the end-to-end change management process, including managing RFCs, coordinating with various functional teams, gathering pertinent information, associating related CIs, incidents, and services to the change request, and providing regular status updates to requesters. Led the planning and implementation stages, ensuring tasks related to the change request were in progress and conducting post-implementation reviews to validate the results of the change request. Achievements: • Played a key role in Change Management within the HP Service Management Team. • Successfully supported Delivery teams during Periodic Planned Activities, leading to a 25% improvement in delivery efficiency

L1 System Engineer at Phoenix IT Solutions Ltd., Oct 2014 - Aug 2015 · 11 mos, • Client Support: Provided comprehensive technical support to clients (APEDCL, WESCO, NESCO, CESU, SOUTHCO & NORTHCO), coordinating with client coordinators for regular updates. • User Management: Handled creation, deletion, and modification of users from AD as per client requests. • Technical Troubleshooting: Provided technical and diagnostic support for all hardware, software, and network issues, maintaining overall ownership of user issues and ensuring resolution within agreed service levels. • Ticket Management: Managed calls through the Remedy ticketing tool, ensuring closure as per SLA. • Team Management: Led a team of engineers in Odisha, overseeing operations and performance. • IT Audit: Conducted IT asset audit & Application License Utilization review every alternate month, ensuring compliance and accuracy. • Connectivity Monitoring: Monitored connectivity between the local Customer Care Centre and the Central Database server, ensuring seamless data flow. • Client Representation: Represented the organization in client visits and reviews, fostering strong client relationships. Achievements: • Played a key role in the infrastructure setup in Odisha, Managing the setup without vendor support. • Led a team development process that resulted in a 70% reduction in tickets from the Odisha, 45% Reduction from Andhra Pradesh location. • Recognized for maintaining 0% downtime due to IT issues, demonstrating exceptional problem-solving and management skills.

Education

Bachelor of Science (BSc), Computer Science, Govt Autonoumus college, Rourkela