Headline

GRC & Compliance Analyst | ISO 27001 · NIST · SOC 2 | Risk Registers · SoA · Security Policies | MSc Cyber Security

About

When a single misconfigured policy can expose an entire organisation to regulatory fines, data loss, or reputational damage — someone has to build the guardrails. That's the work I'm drawn to. I'm a GRC and Information Security professional in the making, currently completing my MSc in Advanced Cyber Security at the University of Chester (graduating Oct 2026). My focus is on the frameworks and documentation that sit between the technical controls and the boardroom — risk registers, compliance assessments, security policies, and audit evidence. What I've built so far: → Designed a full ISO 27001 Risk Register for a fictional SaaS company (DataBridge Technologies) — 20 identified risks, asset-threat-vulnerability mapping, likelihood × impact scoring, treatment plans, and a Statement of Applicability aligned to Annex A controls. → Developed an Information Security Policy and Vendor Risk Assessment documentation suite as a LinkedIn-ready compliance portfolio. → Applied the NIST Cybersecurity Framework to design a risk assessment tool for SMEs as part of academic research. → Completed PwC's Power BI Job Simulation on Forage — translating compliance data into visual dashboards for decision-makers. Frameworks I work with: ISO 27001, NIST CSF, SOC 2 Trust Service Criteria, CIS Controls, India's DPDP Act, UK GDPR. I'm actively seeking entry-level roles in GRC, information security compliance, or risk analysis — remote or hybrid, UK or India-based. If you're hiring for a junior GRC or compliance analyst role, or if you'd like to review my portfolio, I'd love to connect. 📎 Portfolio available on request.

Location

Vadodara

Work experience

Independent GRC Portfolio Development at Self-Employed, Jan 2026 - Present · 6 mos, Remote, Built a comprehensive ISO 27001 compliance documentation suite covering risk register, SoA, information security policy, and vendor assessment for a fictional SaaS organisation. Researched and applied NIST CSF and SOC 2 frameworks to develop a cybersecurity risk assessment tool scoped for SMEs, demonstrating applied understanding of control selection and documentation. Produced all deliverables to professional standard for use as a LinkedIn-visible portfolio, demonstrating initiative beyond coursework.

GRC Analyst at PlutoSec - Cybersecurity Company Canada, Nov 2025 - Present · 8 mos, Hybrid, Working as a GRC Analyst at PlutoSec, a Canadian cybersecurity firm specialising in practical, real-world security solutions for growing businesses. → Conducting governance, risk, and compliance assessments to help client organisations identify security gaps and align with industry frameworks including ISO 27001 and NIST CSF. → Supporting the development and review of information security policies, risk registers, and compliance documentation for clients across multiple sectors. → Collaborating remotely with a cross-functional security team in a hybrid capacity, gaining exposure to client-facing GRC advisory in a commercial cybersecurity environment. → Applying academic framework knowledge (ISO 27001, SOC 2, CIS Controls) to real business security challenges, bridging theory with professional practice.

Python Developer Intern at SyncEdge Solutions, Nov 2024 - Mar 2025 · 5 mos, Vadodara, Completed a 4-month internship at SyncEdge Solutions, a Vadodara-based tech firm, working as a Python Developer on a real-world project. → Built a Stock Prediction App using Python and MySQL, gaining hands-on experience in data-driven application development, database integration, and backend logic. → Worked with structured datasets and applied Python scripting to process and analyse stock market data for predictive output. → Delivered a functioning application within a professional team environment, strengthening skills in Python, SQL, and project-based development.

Education

Master's degree, Advanced Cyber Security, University of Chester

Bachelor of computer application, Computer Programming, Specific Applications, Parul University