Tarun Sharma

Experience

• 

  Inland Revenue NZ

  Apr 2011 - May 2018

  Conducted risk assessments and provided analytical direction to policy decision makers on financing/transfer pricing issues related to international tax structures of foreign-owned businesses. Undertook financial analysis to provide a view of the tax compliance position of individual customers and multinational enterprises in potential or known high-risk areas. Delivered projects across multiple business units within Inland Revenue, while proactively identifying areas for improvement and providing recommendations to senior leaders that are measurable. This involved gathering business requirements, conducting gap analysis, determining solution approach, developing business cases and writing investment proposals to the project management office (PMO). Conducted analysis to determine a customer’s financial position, investigate sources of funds and make recommendations on a customer’s ability to pay. Applied compliance interventions and legal actions to enforce the collection of outstanding tax returns and debt from individuals and companies.

  • Senior Intelligence Analyst

    Jul 2015 - May 2018

  • Senior Advisor

    Feb 2013 - Jul 2015

  • Collections Officer

    Apr 2011 - Feb 2013
• 

  Axenic Ltd

  May 2018 - Dec 2019

  Security Consultant

  Primarily involved in delivering information security consulting to clients by providing security risk assessments, assurance and advice. This includes performing security risk assessments, creating security risk management plans, conducting security audits against industry good/best practices (e.g. CIS Benchmarks, NZISM, PSR, ISO 27001), and providing recommendations that can be read, understood and actioned by non-technical decision makers.

• 

  Xero

  Jan 2020 - Sept 2022

  Ensure that Xero stays compliant with ISO/IEC 27001:2013 and SOC 2 requirements. Lead and implement threat modelling (STRIDE) practice within Xero. Perform risk assessments across new and existing Xero features/products. Provide assurance reporting to the Security Governance Group, Risk Owners and System Owners. Contribute towards a range of challenging Xero security projects related to products on Amazon Web Services (AWS) and Microsoft Azure.

  • Senior Security Risk & Compliance Specialist

    Jul 2021 - Sept 2022

  • Security Risk & Compliance Specialist

    Jan 2020 - Jun 2021
• 

  Timely

  Sept 2022 - now

  • Security Manager

    Apr 2024 - now

  • Information Security Lead

    Sept 2022 - Apr 2024
• 

  SalonBiz

  Apr 2024 - now

  Security Manager