Headline

Tech Risk & Regulatory Compliance @ CRED

About

Cybersecurity, Privacy and Regulatory Compliance Leader with experience helping organizations scale products, enter new markets, and navigate complex regulatory environments. Expertise in embedding security, privacy, risk, and compliance into business and technology decision-making through Secure-by-Design practices, governance frameworks, and regulatory transformation programs. Experience spans fintech, SaaS, technology, telecommunications, retail, pharmaceutical, and global enterprise environments.

Location

Bangalore Urban

Work experience

Risk & Compliance at CRED, Mar 2023 - Present · 3 yrs 4 mos, Bengaluru, Karnataka, India, In my role at CRED, I spearheaded risk and compliance initiatives across multiple fintech products, ensuring adherence to stringent regulatory, security and privacy standards. I led Secure-by-Design reviews and acted as the primary facilitator for regulator audits, driving audit readiness and compliance. Additionally, I developed frameworks for executive risk governance that empowered leadership in decision-making processes.

Senior Consultant at EY, Jun 2021 - Mar 2023 · 1 yr 10 mos, Bangalore Urban, Karnataka, India, • Managed ISO 27001 audits and implementations, establishing information security management systems and drafting risk assessment strategies for diverse clients. • Led NIST CSF assessments, identifying gaps and developing cyber strategy and governance to enhance organizational maturity. • Developed vendor risk management frameworks, ensuring compliance through due diligence processes and ongoing vendor assessments. • Conducted audits for various compliance frameworks, including PCI DSS and GAPP, identifying gaps and recommending remediation actions. • Created comprehensive privacy assessment master sheets for data privacy regulations across 25 countries, facilitating gap assessments to ensure compliance.

Consultant at EY, Apr 2019 - Jun 2021 · 2 yrs 3 mos, Gurgaon, Haryana, India

Intern at EY, Apr 2018 - May 2018 · 2 mos, Gurgaon, Haryana, India, ISO 27001 Implementation: Supported implementation of ISO 27001 for Lifesciences clients that included performing gap assessment, developing policies & procedures and conducting risk assessment for various business units in the organisation.

Information Security Analyst at Confidential, Aug 2015 - Jun 2017 · 1 yr 11 mos

Intern at Schneider Electrics, Dec 2013 - Jan 2014 · 2 mos, India

Education

Master of Business Administration - MBA, SYMBIOSIS INTERNATIONAL UNIVERSITY

Bachelor of Engineering - BE, Goa University