Headline

Information Security Lead at Groww | Technology Risk | ISO 27001 | Ex-EY | Ex-Jio

About

Principal (Information Security Engineer) and Business Information Security Officer (BISO) with 9+ years of experience across Information Security, Risk Management, Governance Risk & Compliance, and Compliance Control Automation - spanning consulting, telecom, and regulated fintech environments. Currently BISO for Groww's Lending business and Asset Management Company, owning end-to-end security governance, risk, and compliance across five regulated legal entities. I've led the full CISO charter - driving enterprise security strategy, regulatory alignment (RBI Master Directions, SEBI CSCRF, ISO 27001), and risk oversight across multiple business lines - while acting as strategic advisor to executive leadership and the Board on cyber risk. Core strengths: 🔹 Security Governance, Risk & Compliance - ISMS, BCM, TPRM, ITGC, regulatory audits & VAPT readiness 🔹 Incident Response - built our Cyber Crisis Management Plan and ransomware/DDoS playbooks from scratch; led real incident response (credential compromise, vendor risk exposure) through containment, RCA, and remediation 🔹 Security Architecture - embedding security into system/app design reviews, including cloud controls like VPC Service Control and egress security 🔹 Security Automation & AI Governance - actively building agentic AI solutions using Claude Code, MCP, and Claude Skills to automate compliance monitoring and third-party due diligence; built a centralized Security GRC Dashboard (React.js/Node.js) that replaced manual reporting entirely Certified: CISM | ISO 27001 Lead Auditor & Lead Implementer | ISO 22301 BCP Implementer | ITIL Foundation | Pursuing CISSP

Location

Mumbai

AI stack

claude code

claude

cursor

gemini

n8n

openai

Work experience

Principal Information Security Engineer at Groww, Jul 2024 - Present · 2 y 2 mo, Bengaluru, Karnataka, India

Information Security Manager at Jio Platforms Limited (JPL), Sep 2022 - Jul 2024 · 1 yr 11 mos, Navi Mumbai, Maharashtra, India, • Managing end-to-end information security policy lifecycle by reviewing, updating and getting it approved by all stakeholders. • Preparing risk management/reporting dashboards by coordinating with different department across infosec team and presenting it to management/steering committee on periodic basis. • Assisting in internal/external audits/third party assessments throughout year, tracking issues and ensuring closure of all findings to ensure compliance to different standards and regulations. • Performing Risk assessment activities focusing on ISO 27001, ISO 27002 and ensuring compliance to security standard and regulatory requirements within different businesses of organization • Security Framework: Experience with Cyber Security and Risk Management Frameworks/Standards including ISO 27001/27002, NIST 800-53, NIST 800-37 , ISO 27701, DPDP Act., IT Act., CIS cloud security and other relevant regulatory frameworks.

Manager Technology Risk at EY, Jul 2021 - Sep 2022 · 1 yr 3 mos, Mumbai, Maharashtra, India

Senior Consultant at EY, Oct 2019 - Jul 2021 · 1 yr 10 mos, Mumbai, Maharashtra, India

Consultant at EY, Apr 2017 - Oct 2019 · 2 yrs 7 mos, Mumbai Area, India

Management Intern at Semat, Apr 2016 - May 2016 · 2 mos, Pune Area, India

Education

Master of Business Administration (MBA), System and Finanace, Symbiosis Institute of Digital & Telecom Management (SIDTM), Pune

Bachelor's degree, Information Technology, Gujarat Technological University