Headline

Result driven Cybersecurity Engineer specialised in Governance, Risk and Compliance (GRC), Security Solutioning, Audit Management, Vulnerability Management and upkeep Security Posture!

About

Profile Summary Result driven Cybersecurity Engineer specialised in Governance, Risk and Compliance (GRC) across BFSI, Pharma, FMCG and IT consulting, demonstrating expertise in implementation and audit readiness of various management systems, frameworks, and regulations with also proven ability to manage third-party assessments. Risk Management - Risk Identification/ Valuation, Control Assessments, Mitigation, treatment options, Risk Register/ analytics, and reporting. Vendor Risk Management/ Third Party - TPRM Controls Assessment, Security and Data Controls, Third-Party Integrity, Business Continuity, Contracts Management, Outsourcing and Procurement Policies and Procedure - Author/ Review/ Approve applicable policies, procedures, processes, systems, and internal controls. Internal Controls - Control Ownership, Effectiveness, Design and Operating Effectiveness and Control sign-off. Cybersecurity Governance, Risk & Compliance (GRC) - Management Representative, Regulatory Compliance, Audit lifecycle, Corrective/ Preventive Actions and Certification Programs Persona - Strong interpersonal, leadership, negotiation, and project management skills Core Competencies - Quality Management (ISO9001 – QMS) Information Security Management (ISO27001 – ISMS) Enterprise Risk Management (ISO31000 – ERM) Service Management and Business Continuity (ISO20000 – ITSMS and ISO22301 – BCMS) Third Party Risk Management (NIST: 800-53) Governance, Risk and Compliance (GRC) Proficiency - Cisco Cybersecurity Certification - Cisco Networking Academy ISEA Cyber Hygiene Practitioner - Information Security Education & Awareness (ISEA), Govt. of India Network Defence Essentials (NDE) - EC-Council Working experience - ISO9001, ISO27001, ISO20000, ISO22301, GDPR, NIST 800-53, SOC-II, PCI-DSS, HIPAA and DPDP Act Security Solutioning - Data Loss Prevention (DLP) Identity and Access Management (IAM) Vulnerability Assessment (VA)

Location

Bangalore Urban

AI stack

antigravity

claude

codex

notebooklm

openai

Figma Make

Work experience

Information Security / GRC at Mitigata™ - Smart cyber insurance, Aug 2025 - Jul 2026 · 11 mo, Bengaluru, * Actively led several clients to audit/ assessment readiness on ISO27001, ISO20000, ISO22301, SOC-II and PCI-DSS audits and assessments * Spearheaded the implementation and continuous monitoring of ISO 27001:2022, SOC 2, and NIST CSF controls, directly improving client security and compliance posture scores * Executed comprehensive Third-Party Risk Management (TPRM) programs, conducting vendor security due diligence reviews and risk-tiering assessments for 10+ enterprise suppliers complying with NIST: 800-53 guidelines * Collaborated with cross-functional stakeholders to orchestrate audit documentation, control validation testing, and compliance reporting cycles, ensuring zero audit findings on assigned domains * Contributed to enterprise-wide risk assessments by identifying emerging cloud threats, quantifying risk exposure, and presenting data-driven mitigation strategies to senior leadership * Contributed to enterprise-wide risk assessments by identifying emerging cloud threats, quantifying risk exposure, and presenting data-driven mitigation strategies to senior leadership

Education

Bachelor of Technology, Cyber security, Garden City University