About
Cybersecurity professional with over 2 years experience in vulnerability assessment and security analysis, currently transitioning into Governance, Risk, and Compliance (GRC) to better understand the business impact of security vulnerabilities and support organizations in implementing risk-based security and compliance controls. My interest in GRC developed through conducting risk-based vulnerability assessments and understanding how security findings impact business operations, compliance requirements, and organizational risk. This motivated me to transition toward Governance, Risk, and Compliance to focus on risk management, security controls, compliance frameworks, and improving overall security posture through structured governance practices. I've independently built a hands-on GRC portfolio covering: → PCI DSS v4.0 Network Segmentation Review — full 12-requirement assessment for a fictional fintech, 6 critical gaps identified, phased remediation plan developed → ISO 27001:2022 Statement of Applicability — 38 Annex A controls assessed with applicability decisions and justifications → SOC 2 readiness assessment — focused on access control, logging, backup security, and risk remediation recommendations Frameworks: ISO 27001:2022, NIST CSF 2.0, PCI DSS v4.0, SOC 2 Tools: ServiceNow, Burp Suite, Nessus, Archer Portfolio: https://github.com/pranaycs/GRC-Porfolio Certifications: ISC2 Certified in Cybersecurity — in progress | ISO 27001 LinkedIn Learning — completed | Mastercard Cybersecurity Simulation — completed Currently expanding expertise in risk assessment, security compliance, vendor risk management, access control reviews, and security governance. Passionate about helping organizations improve security posture through structured risk-based approaches and compliance-driven security practices. Actively exploring opportunities in GRC, information security, compliance, risk management, and security governance
Work experience
Cyber Security Analyst at Secrazy Solutions, Mar 2026 - May 2026 · 3 mos, Remote
Test Engineer at Infosys, Feb 2022 - Dec 2023 · 1 yr 11 mos, Hyderabad, Telangana, India
