Ayshik H.

Associate Consultant

Bengaluru, Karnataka, India4 yrs 1 mo experience

Most Likely To SwitchAI ML Practitioner

Key Highlights

Led successful ISO audits enhancing compliance maturity.
Implemented automation in compliance processes using ServiceNow.
Conducted comprehensive risk assessments and incident investigations.

Stackforce AI infers this person is a Cybersecurity and Risk Management expert with a focus on compliance and information security.

Contact

Skills

Core Skills

Governance, Risk Management, And Compliance (grc)Information SecurityCybersecurity

Other Skills

API SecurityAngularJSApplication Programming Interfaces (API)Application SecurityArtificial Intelligence (AI)AuditingBardBootstrapC (Programming Language)Cloud Infra AuditsCloud SecurityComplianceCritical Infrastructure ProtectionCyber Risk ManagementCyber Security Risk

About

Experienced Risk & Compliance Analyst with 3.5+ years in information security and third-party risk assessments with onshore experience in Europe. Skilled in ISO 27001, infosec frameworks, and GRC, with a strong focus on risk evaluation, mitigation, and reporting using tools and automations. Seeking to contribute to a dynamic team by enhancing infosec posture, risk frameworks and supporting secure, compliant operations.

Experience

4 yrs 1 mo

Total Experience

2 yrs

Average Tenure

2 yrs 7 mos

Current Experience

Plat4mation

2 roles

Senior Risk and Compliance Analyst

Promoted

Jan 2025 – Present · 1 yr 4 mos · Bengaluru, Karnataka, India · Hybrid

Led GRC initiatives in a team structure , achieving successful ISO 27001 and ISO 9001 audits and enhancing compliance maturity for Information security, Privacy and Business continuity.
Exposure to working onshore in Netherlands during external audits.
Executed IT and risk assessments, reducing audit gaps and improving control effectiveness across systems.
Ensured GDPR compliance by implementing robust data privacy frameworks and safeguarding PII.
Strengthened GRC posture by implementing compliance system into ServiceNow platform and automating manual processes like customer assessments/enquiries, control monitoring, risk management, audit compliance etc.
Delivered actionable risk insights to stakeholders, accelerating remediation and improving risk posture via compliance dashboards and performance analytics in ServiceNow.
Assisted in compliance due diligence during M&A and take ownership of post-merger integration activities.
Worked on technical IT controls like developing agentic AI bot for compliance, DLP, Sentinel and Purview to ensure robust IT security.

ISO 27001ISO 9001GRCGDPRServiceNowRisk Management+3

Risk and Compliance Analyst

Oct 2023 – Jan 2025 · 1 yr 3 mos · Bengaluru, Karnataka, India · Hybrid

Conduct vendor assessments, risk management, GAP analysis, control compliance, and application security assessments.
Lead security incident investigations, risk mitigation plans, and strategic security developments.
Advise the global IT team in cloud security and IT changes to comply with security requirements.
Audit internal processes for ISO27001, ISO9001, GDPR, and other European standards.
Perform security assessments, run awareness sessions, and develop security policies.
Provide threat analytics, respond to security incidents, ensure business continuity, and maintain compliance standards.
Improving AI governance by focusing on information security and data privacy while onboarding AI services.

Vendor AssessmentsRisk ManagementGAP AnalysisApplication SecurityISO 27001GDPR+2

Wipro

Cyber Security Analyst

Apr 2022 – Oct 2023 · 1 yr 6 mos · Bengaluru, Karnataka, India · Hybrid

Conducted thorough vulnerability assessments, cloud infra audits and penetration testing, providing actionable recommendations to strengthen clients' security postures.
Collaborated with cross-functional teams to develop and implement effective GRC strategies, ensuring adherence to regulatory requirements.
Managed security incidents, conducted investigations, and implemented incident response protocols to minimize the impact of security breach.
Performed SOC 2 audits and worked on SOX compliance for a major EU client.

Vulnerability AssessmentsCloud Infra AuditsPenetration TestingGRC StrategiesSOC 2 AuditsCybersecurity+1