Headline

IT Risk Advisory Associate | Data Privacy & GRC Professional | ISO 27001, DPDP & ITGC | Third-Party Risk Management | IEEE Published Researcher

About

IT Risk Advisory professional specializing in Governance, Risk, and Compliance (GRC) and Data Privacy, with experience supporting regulatory compliance and risk management initiatives across frameworks including ISO 27001 and DPDP. Experienced in IT General Controls (ITGC) testing, Third-Party Risk Management (TPRM), privacy compliance assessments, and audit readiness activities. Skilled in evaluating control effectiveness, identifying risk exposures, implementing data protection controls, and supporting risk remediation to strengthen governance, security, and privacy posture. Interested in delivering risk-driven advisory solutions at the intersection of technology, data privacy, and cybersecurity governance within regulated environments.

Location

Bengaluru

Work experience

Associate - IT Risk Advisory at MGC Global Risk Advisory LLP, Jul 2025 - Present · 1 yr, Bengaluru, Karnataka, India · Hybrid, Performed compliance testing and compliance readiness assessments, including drafting and reviewing policies, procedures, and documentation aligned with ISO 27001, GDPR, HIPAA, PDPL, and ITGC requirements. Executed Third-Party Risk Management (TPRM) activities, including vendor risk assessments, due diligence reviews, and evaluation of third-party security and compliance documentation. Supported data breach and incident response activities, contributing to risk assessment, root cause analysis, and implementation of corrective and preventive controls. Drafted and implemented an AI Governance Policy, defining responsible AI usage principles, risk controls, and governance mechanisms. Conducted IT control testing to support internal audits, identify control gaps, and improve overall control effectiveness. Prepared compliance and audit reports and maintained audit-ready risk registers and evidence repositories.

Intern - IT Risk Advisory at MGC Global Risk Advisory LLP, May 2025 - Jun 2025 · 2 mos, Bengaluru, Karnataka, India · Hybrid, Assisted in Third-Party Risk Management (TPRM) processes by supporting vendor assessments, identifying preliminary risk indicators, and organizing third-party documentation for review. Performed IT control testing procedures under supervision, documenting test results and supporting audit and compliance requirements. Supported preparation of compliance and audit reports and maintained risk and evidence documentation to aid audit readiness activities.

Education

B.Tech, Computer Science & Engineering (Cyber Security), Dayananda Sagar University