Bhoomika TS

Associate Consultant

Bengaluru, Karnataka, India2 yrs 10 mos experience

Key Highlights

Expert in ISO 27001 audits and compliance.
Proven track record in TPRM and risk management.
Strong collaboration with cross-functional teams.

Stackforce AI infers this person is a Cybersecurity expert specializing in GRC and risk management for financial services.

Contact

Skills

Core Skills

Iso 27001GrcTprm

Other Skills

IT GRCIT AuditAudit ReportsRisk ManagementThird Party Risk ManagementInformation Security ManagementGovernanceCompliance (GRC)EducationMicrosoft ExcelEngineeringPresentationsProblem SolvingCommunicationLeadership

About

With experience in IT auditing and consulting, I specialise in helping organisations strengthen their security posture and ensure compliance with global standards. My core expertise lies in conducting ISO 27001 audits, Third Party Risk Management (TPRM) and comprehensive IT security assessments. I have successfully guided organisations through ISO 27001 certification, led TPRM audits and helped align security frameworks with industry best practices. My approach blends technical proficiency with a risk-based mindset, enabling me to deliver tailored security solutions that address real world challenges. Passionate about cybersecurity and governance, I thrive on collaborating with cross-functional teams to identify vulnerabilities, mitigate risks and implement robust controls that drive long-term resilience.

Experience

2 yrs 10 mos

Total Experience

Average Tenure

Current Experience

Codezye cyber

Risk advisory consultant

Aug 2025 – Present · 10 mos · Greater Bengaluru Area · Hybrid

Demonstrated expertise in conducting ISO 27001 audits, producing detailed and comprehensive audit reports that support continuous improvement and compliance.
Successfully managed a portfolio of supply chain vendors, ensuring compliance with both internal governance requirements and external regulatory frameworks.
Proficient in GRC practices and implementing standard frameworks such as ISO 27001, with a strong focus on aligning security controls with business objectives.
Specialised in identifying and resolving compliance gaps, helping clients enhance their Information Security Management Systems (ISMS) and overall risk posture.
Proven ability to manage the entire audit life cycle, from initial planning and field work to reporting and follow-up, ensuring timely and actionable outcomes.
Regularly monitored vendor performance and conducted periodic reassessments to ensure sustained compliance and risk mitigation.

IT GRCIT AuditISO 27001GRC

Zerofox

Cyber Security Analyst

Jun 2023 – Jun 2025 · 2 yrs · Bangalore Urban · Hybrid

Led and managed ISO 27001 audits, providing certification support.
Conducted thorough TPRM audit to Banking client vendors.
Assisted in the development of audit questionnaires for ISO 27001 compliance tools.
Coordinated audit activities, managing preparation, execution and post-audit follow up.
Conducted security awareness training to corporate clients as per ISO 27001:2022 requirement.

Risk ManagementISO 27001TPRM