Dec 2023 – Mar 2025 · 1 yr 3 mos · Hybrid

• Experienced in leveraging GRC tools (ServiceNow, OneTrust, 6Clicks) to streamline processes, monitor risks, and produce insightful reports.
• Implement, and maintain a robust GRC framework, ensuring its alignment with the organization's strategic objectives.
• Develop and implement comprehensive compliance policies and procedures to mitigate risks and ensure regulatory adherence.
• Foster effective communication with key stakeholders, including senior management, board members, and external auditors, to promote GRC awareness and collaboration.

Aug 2020 – Dec 2023 · 3 yrs 4 mos

• Manage the Core team and organize its work. Establishing and maintaining an effective documented information security management system as per ISO/ IEC 27001:2013, SOC2 standard requirements Strategic development of Information security infrastructure to meet the business needs of organizations. Working with all business units to determine possible risks and risk management processes. Business development planning and acquiring the correct technology. Ensuring that newly acquired technology complies with the IT security regulations. Planning, designing, and implementing an IT and network strategy for the company. Managing the continuous maintenance of the IT network to ensuring optimum security levels are maintained.  Ensuring that no internal breaches or misuse of data take place. Determining the cause of internal and external data breaches and instituting appropriate corrective action. Planning and conducting regular internal audits and compliance audits. Reporting to the Top Management / stake holders about the performance of ISMS, SOC and other compliances. Coordination between the management and the certifying authority.Devising, testing, and reviewing Business Continuity Planning including DR Plans, Emergency Evacuation Plans & Crisis Management Plans. Liaison with external bodies regarding Information Security Management System.
• Led security division
• Designed and implemented Information Security Management System (ISO 27001), SOC2, CCPA and Readiness of PCI DSS.
• Designed and implemented information security processes
• Conducted risk assessments and audits

Jan 2018 – Aug 2020 · 2 yrs 7 mos

Nov 2015 – Dec 2017 · 2 yrs 1 mo

Apr 2013 – Oct 2015 · 2 yrs 6 mos

Jul 2012 – Apr 2013 · 9 mos · Bangalore

Sep 2011 – Apr 2013 · 1 yr 7 mos · On-site

• Designing and hosting websites for small-scale industries. Our expertise also extends to setting up robust network infrastructure for seamless connectivity and implementing advanced physical security controls to safeguard assets and operations.