Bejoy M

Security Consultant

Bengaluru, Karnataka, India2 yrs 1 mo experience

Highly Stable

Key Highlights

Over 15 years of experience in security compliance.
Expert in leading compliance initiatives for ISO 27001 and SOC 2.
Proven track record in managing cross-functional teams.

Stackforce AI infers this person is a Security Compliance Leader with expertise in Governance, Risk, and Compliance in enterprise environments.

Contact

Skills

Core Skills

Governance, Risk & Compliance (grc)Iso 27001Compliance ManagementRisk Management

Other Skills

GovernanceRisk & Compliance (GRC)SOC 2 / SSAE 18 AuditsInternal & External AuditsOperational Risk ManagementAccess GovernanceSOC 2Audit ManagementRisk IdentificationStakeholder EngagementIT General Controls (ITGC)SSAEITIL CertifiedInternal RiskInformation Security Management System (ISMS)

About

Security Compliance Leader | Risk Strategist | Certified CISA, CSOXI, CITGCP, ISO27001 LA, ITIL V4 [F] I’m a passionate and results-driven Security Compliance Manager with over 15+ yrs of experience helping global organizations build resilient, audit-ready environments. My work spans across GRC, ISMS implementation, SOC 2 audits, risk assessments, physical security, and Identify Access Management[IAM] I specialize in leading compliance initiatives aligned with regulatory mandates such as ISO 27001, SOC2, while also enhancing organizational maturity through internal audits, endpoint security, and user access controls. With a proven track record of managing cross-functional teams and interacting with external auditors, I ensure organizations are not just compliant — but security-forward. Let's connect if you're looking to strengthen your compliance landscape, pass audits confidently, and transform risk into opportunity.

Experience

2 yrs 1 mo

Total Experience

2 yrs 1 mo

Average Tenure

2 yrs 1 mo

Current Experience

Confidential

Security Compliance Manager

Mar 2024 – Present · 2 yrs 1 mo · Remote

As the Security Compliance Manager, I lead and manage end-to-end security and compliance activities for a critical internal program. I am responsible for ensuring that all audit, governance, and access control requirements are not only met but are strategically aligned with enterprise risk management goals.
Key Responsibilities & Leadership Highlights:
Audit & Compliance Leadership:
Direct the organization’s audit readiness by overseeing evidence collection and validation for ISO 27001, SOC 2, and internal process control reviews. Ensure cross-team coordination and timely submission to external and internal auditors.
Stakeholder Engagement & Issue Resolution:
Act as the primary liaison between auditors and functional teams. Manage audit walkthroughs and provide executive-level visibility into findings, remediation actions, and strategic risk mitigation plans.
Access Governance Oversight:
Drive quarterly privileged access reviews for critical business functions, ensuring strict compliance with least-privilege principles and timely revocation of non-compliant access.
Risk Identification & Mitigation:
Lead cross-functional collaboration to proactively identify compliance risks and implement risk-based corrective actions with clear ownership and deadlines.
Security Hardening & Monitoring:
Supervise compliance with system-level controls, including periodic review of privileged utility programs and assurance of proper installation protocols.
Policy Governance:
Monitor global policy changes and ensure rapid internal alignment. Implement procedural enhancements to support evolving compliance obligations and audit criteria.