Brijesh K.
Risk and Compliance @ CRED
Bengaluru
7+ years of work experience
Feb 20233 yrs 9 mosPresent
Bengaluru, Karnataka, India
- Oversaw technology-risk governance across payment products, cloud infrastructure, identity systems, internal platforms, distributed microservices, and enterprise AI initiatives; managed a portfolio of 300+ technology risks.
- Developed and operationalized a 350+ control compliance framework for the Payment Aggregator business, translating RBI requirements into engineering and operational controls.
- Interpreted RBI Payment Aggregator and PPI/wallet requirements for payment initiatives, including merchant onboarding, tokenisation, escrow management, data handling, and infrastructure changes.
- Embedded regulatory, security, and operational risk reviews into solution design and architecture reviews with Engineering and Product teams before production deployment.
- Led cross-functional remediation and closure of RBI supervisory observations by coordinating Engineering, Product, Operations, Legal, and business stakeholders.
- Implemented continuous-control monitoring that automated 50+ security and compliance controls across cloud infrastructure, endpoints, identity management, and collaboration platforms.
- Redesigned the Business Impact Analysis process using AI-assisted workflows, reducing assessment effort from 5 days to under 2 hours while improving documentation quality.
- Established governance practices for enterprise AI platforms supporting 400+ production workflows, 700K+ AI interactions, and 40+ AI agents.
- Assessed AI risk and production readiness for LLM-enabled applications, RAG workflows, coding assistants, voice initiatives, and agentic workflows.
- Defined controls for AI-system ownership, authentication, data protection, user attribution, privileged access, lifecycle management, and auditability.
- Integrated Responsible AI controls into existing technology-risk and governance processes to support ISO 42001 readiness.
- Produced executive risk reporting and governance metrics through ServiceNow GRC.
Mar 20221 yrFeb 2023
Gurugram, Haryana, India
- Managed Information Security Management Systems supporting ISO 27001 certification across multiple consulting engagements.
- Led technology-risk assessments, audit-readiness initiatives, and governance reviews for enterprise clients.
Partnered with Engineering and Delivery teams to strengthen controls across cloud infrastructure, identity management, and enterprise applications.
- Performed control-design reviews, remediation validation, and executive risk reporting.
Apr 20211 yrMar 2022
Gurugram, Haryana, India
- Delivered technology-risk consulting engagements for financial-services and technology organizations covering internal audit, IT General Controls, SOX, and regulatory programs.
- Evaluated security architecture, identity management, application security, and infrastructure controls across critical enterprise environments.
- Advised clients on risk identification, remediation strategy, and governance-maturity improvements; prepared executive-level audit observations and recommendations.
Oct 20207 mosApr 2021
Gurugram, Haryana, India
Jun 20191 yr 5 mosOct 2020
Gurugram, Haryana, India
Jun 20172 mosJul 2017
Gurgaon, Haryana, India
-Understanding of ITGC and SOC audit
-Assisted Auditors at two of their client sites in performing IT audits
-Analysed their previous audit reports developing understanding over various controls and how to test them
-Researched over the privacy laws in major countries of the world
Brijesh’s AI Stack
Education
Bachelor of Technology (B.Tech.), Computer Science
UPES
20154 yrs2019
Join Brijesh and 10k+ other professionals on
Tal is the app where bosses meet engineers & builders directly, without middlemen
Download Tal Boss