Headline

Cybersecurity & GRC Professional | Third-Party Risk Management | AI Governance | Cloud Security

About

Risk doesn't wait. Neither do I. I'm a Cybersecurity and GRC professional at FICO, working at the intersection of security, governance, and business velocity. For the last 3+ years, I've been the person who walks into messy problems, fragmented processes, undocumented gaps, manual workflows nobody wants to own and turns them into systems that actually run. I didn't inherit our governance framework. I helped build it. When critical program gaps existed, I closed them. When exception governance lacked visibility, I architected the dashboard. When risk scoring was scattered across teams, I led the work to centralize it. Outstanding rating two cycles in a row not by accident. My world lives at the edges of trust. Every vendor we onboard, every policy exception we approve, every fourth party sitting quietly behind a third these are the seams where risk hides. My job is to find those seams before they tear, and to build the muscle memory across the organization so the next person doesn't have to start from zero. What drives me is the part most people skip: the structure underneath. Anyone can flag a risk. The harder work is building the system that makes risk visible, accountable, and actually move forward. SOPs that people actually use. Dashboards that tell the truth. Workflows that don't rely on someone remembering to send an email. I've also spent the last year leaning hard into AI not as a buzzword, but as a tool. Custom knowledge bases. Tailored prompts. Automation that takes the grind out of audit response and exception management. The frameworks are catching up to AI governance, and I want to be one of the people writing what comes next. I'm certified across the frameworks that matter ISO 27001 Lead Auditor, ISO 42001 AIMS Lead Implementer, CCSK, ISC2 CC and currently pursuing my M.Tech at BITS Pilani. But certifications are just the language. The real work is translating it into something a business can use. The way I see it, GRC isn't a checklist function. Done right, it's how an organization earns the right to move fast. That's the work I want to keep doing and keep getting better at. I'm always open to conversations with people thinking hard about TPRM, AI governance, cloud security, and the future of GRC. Let's talk.

Location

Bengaluru

AI stack

claude code

codex

hermes agent

lovable

n8n

ollama

Work experience

Cybersecurity Engineer II at FICO, Dec 2025 - Present · 10 mos

Cyber Security Engineer I at FICO, Jun 2024 - Nov 2025 · 1 yr 6 mos

Cybersecurity-Associate at FICO, Jul 2023 - May 2024 · 11 mos, Bengaluru, Karnataka, India

Cyber Security Engineer at Virtually Testing Foundation, May 2022 - Jul 2022 · 3 mos, Remote

Education

Master of Technology - MTech, Computing Systems & Infrastructure, Birla Institute of Technology and Science, Pilani

Bachelor of Technology - BTech, computer science and engineering, Jain (Deemed-to-be University)