About
I'm a Cybersecurity professional with 5+ years of experience sitting at the intersection of security assurance, GRC, and hands-on technical delivery - helping enterprise technology teams build compliance-first security programmes that actually hold up under scrutiny. At IndiaMART, I lead a 2nd Line security assurance function: running Compliance Risk Assessments (CRA) and RCSAs, managing Issue Management lifecycles in Jira, preparing governance and C-Suite reporting, and coordinating cross-functional security alignment across InfoSec, Platform, Cloud, and Data teams. At the same time, I stay deeply technical - deploying open-source SIEM and CSPM (Wazuh) across AWS and GCP, building WAF defences against OWASP Top 10, and scripting automation in Python and Bash to make compliance and audit processes repeatable at scale. One project I'm particularly proud of: I built an AI-driven compliance remediation engine integrated into our CI/CD pipeline (SonarQube + LLM) that reduced security issues from 7 million to approximately 20,000 — a 99.997% reduction — while generating contextual fix explanations that developers could actually act on. Things I do well: → Translating regulatory requirements (ISO 27001, GDPR, PCI-DSS, RBI Framework) into controls that stick → Coordinating security assurance across portfolios — unified risk view across VAPT, DevSecOps, SIEM, and compliance outputs → Embedding security into agile delivery cycles — sprint planning, backlog grooming, threat modelling workshops → Building and operating security tooling: Elastic SIEM, Wazuh, SonarQube, Nessus, Burp Suite, AWS Security Hub, GCP SCC → Producing clear, evidence-based risk reporting for governance forums and executive stakeholders Certified: CEH v12 · ISO 27001 Internal Auditor · AWS CCP · CKS (in progress) Education: MBA in IT & Systems Management (NMIMS) · B.E. Computer Science (NIT Sikkim) Actively exploring roles in Cybersecurity GRC, Security Assurance, and Information Security across India and globally — open to relocation to Europe, UK, or the US. Happy to connect.
