About
I am an Information Security, Governance, Risk & Compliance (GRC) professional with 10 years of experience designing, implementing, and continuously improving enterprise governance, risk management, compliance, and IT audit programs for global organizations. My expertise spans Information Security Governance, Enterprise Risk Management, IT Audit, Controls Management, ISO 27001:2022, SOC 2 Type II, Cloud Security (AWS), AI Governance (ISO 42001), and Regulatory Compliance, helping organizations strengthen security posture while enabling business growth. I have successfully led end-to-end compliance initiatives, internal audits, external certifications, risk assessments, control maturity programs, and executive governance reporting. My approach focuses on building sustainable GRC programs that embed accountability, measurable control effectiveness, and continuous improvement rather than treating compliance as a one-time exercise. Core Expertise • Information Security Governance & GRC Strategy • Enterprise Risk Management & Risk Assessments • IT Audit & Security Assurance • ISO 27001:2022 ISMS Implementation & Internal Audits • SOC 2 Type II Readiness & Audit Management • AI Governance (ISO 42001) • Cloud Security Governance (AWS) • Controls Design, Testing & Continuous Monitoring • Policy, Standards & Control Framework Development • Audit Evidence Management & Control Lifecycle • Executive Governance Reporting & Metrics • Cross-functional Stakeholder Management Professional Highlights ✔ Led enterprise-wide ISO 27001:2022 certification, surveillance, and recertification activities with successful audit outcomes. ✔ Managed SOC 2 Type II compliance programs, partnering with internal stakeholders and external auditors throughout the audit lifecycle. ✔ Designed and enhanced governance, risk, and controls frameworks that improved compliance maturity and reduced audit effort. ✔ Conducted enterprise risk assessments, control effectiveness reviews, and remediation tracking across business and technology functions. ✔ Built scalable governance processes, control ownership models, and evidence management practices aligned with global security standards. ✔ Partnered with senior leadership, engineering, security, legal, HR, and business teams to translate regulatory requirements into practical and business-focused security controls. I am passionate about building mature, risk-driven GRC programs that enable organizations to achieve security, compliance, and business objectives through effective governance, measurable controls, and continuous improvement.
Work experience
Global Security - GRC at NetApp, Nov 2024 - Present · 1 yr 11 mos
Governance Risk & Compliance Lead - Cloud & Infrastructure at Visionet Systems Inc., Feb 2023 - Nov 2024 · 1 yr 10 mos, India
Governance Risk & Compliance Specialist at Yellow.ai, Mar 2022 - Jan 2023 · 11 mos, Bangalore
Cyber strategy & Transformation Consultant II at Optiv, Sep 2021 - Mar 2022 · 7 mos
Senior Associate Infosec & Compliance at Netsurion, Dec 2019 - Sep 2021 · 1 yr 10 mos, Remote
