Headline

Driving IT GRC, RBI IT Compliance & Information Security Excellence | PCI DSS (QSA) | ISO 27001 LA/LI | Cyber Law PGD | Pre-Sales Security | Trusted by 10K+ Professionals

About

As Associate Directorat Cashfree Payments, I leverage over a decade of expertise in information security and IT compliance to fortify organizational resilience. My focus lies in ensuring adherence to IT General Controls (ITGC), IT Application Controls (ITAC), and RBI regulations. By spearheading risk-based IT audits, I contribute to enhancing compliance frameworks and mitigating risks aligned with organizational and payment industry objectives. With proficiency in PCI DSS (QSA), ISO 27001, and IT governance practices, I collaborate with cross-functional teams to drive a culture of compliance and operational excellence. By delivering actionable audit insights and staying ahead of regulatory changes, I empower our teams to achieve robust compliance and safeguard organizational integrity.

Location

Bengaluru

AI stack

claude

Work experience

Associate Director - Information security at Moneyview, Dec 2025 - Present · 9 mos, Bengaluru, Karnataka, India

Associate Director - Internal Audit (IT GRC) at Cashfree Payments, Jun 2024 - Dec 2025 · 1 yr 7 mos, Bengaluru, Karnataka, India, Audit Planning: Develop and implement a risk-based IT audit plan aligned with Cashfree’s objectives and payment industry risks. Conduct Audits: Lead independent IT audits, assessing controls and compliance with RBI regulations and internal policies. Reporting: Prepare clear IT audit reports with actionable recommendations for senior management and Board. Compliance Oversight: Ensure adherence to IT General Controls (ITGC) and IT Application Controls (ITAC) under RBI guidelines. Stakeholder Engagement: Collaborate with cross-functional teams to promote a culture of compliance and risk awareness. Regulatory Updates: Monitor industry regulations and adjust audit plans accordingly to maintain compliance. Team Management : Manage external audit staff and foster a collaborative team environment. Risk Assessment: Evaluate emerging technologies and risks in the payment sector to safeguard digital assets

Information Technology Auditor at Navi, May 2023 - Jun 2024 · 1 yr 2 mos, Bengaluru, Karnataka, India, - Developed and executed risk-based annual IT audit plans across Navì Group entities, aligning with organizational goals and emerging risk areas. - Conducted IT audits independently or in collaboration with external auditors, assessing controls, operational efficiencies, and compliance with policies and regulations across Navì Group entities. - Provided clear and concise IT audit reports with actionable recommendations for senior management within Navì Group. - Coordinated IT General Controls (ITGC) and IT Application Controls (ITAC) audits for Navì Group, ensuring compliance with industry standards and regulatory requirements set by RBI, SEBI, and IRDAI. - Established collaborative relationships across Navì Group entities and actively contributed to key business decisions. - Stayed abreast of industry standards and regulatory requirements set by RBI, SEBI, and IRDAI, updating audit plan accordingly to address the needs of Navì Group

Associate Director - Compliance (IT GRC) at slice, Dec 2022 - Apr 2023 · 5 mos, Bengaluru, Karnataka, India, - building and leading the compliance team - Manage PCI DSS Implementation and Certification (Level 1 and SAQ-D). - Handle external Auditors (PCI QSA, ITGC Auditors, Third party/Partner Auditors) - Be the focal point for all IT and Information Security regulations applicable to the company. - Remediate audit gaps by coordinating with all the teams. - ISO 27001 Implementation. - SAR DL audits and TPAP/PPI audits execution - RBI and NPCI Guideline/regulations Implementation.

Compliance Manager (IT GRC) at slice, Nov 2020 - Dec 2022 · 2 yrs 2 mos, Bengaluru, Karnataka, India

Presales security engineer and Audit Co-Ordinator at Infobip, Aug 2019 - Nov 2020 · 1 yr 4 mos, Bengaluru, Karnataka, India, To know technical aspects of Infobip’s products and solutions. To have an excellent overview of the business and are up-to-date with the latest industry trends as well as the competition. To understand client’s business, knowing exactly which of our products can help them evolve their business. To act as a go-to person in presales team for security-related assignments such as security questionnaires and helping the team in the RFP process. To constantly align with Corporate Security and Privacy office and Legal department. To ensure that all projects are delivered on-time, within scope and within budget. To develop project scopes and objectives, involving all relevant stakeholders and ensuring technical feasibility. To have good understanding of the Security/network infrastructure within Infobip and specific to region. To have clear knowledge of the technical security and compliance issues within the company. To conduct internal audit reviews for ISO 27001 certification. To be Regional point of contact for the global CISO.

Education

Postgraduate Degree, Cyber Law and Cyber Forensics, National Law School of India University

Bachelor of Engineering (BE), Electrical and Electronics Engineering, Rajiv Gandhi Institute of Technology, BANGALORE