Headline

Security Risk & GRC | Building Enterprise Risk & AI Governance Programs | TPRM, ISO 27001, SOC2 | Cloudflare | Ex-EY, Paytm

About

I build and scale Security Risk & GRC programs for SaaS and fintech companies, with experience across Cloudflare, Flexera, Paytm and EY. My focus is simple: translate security risk into business decisions that enable growth, not slow it down. Core experience: Enterprise Risk Management & Risk Register design Third Party Risk Management (TPRM) at scale ISO 27001 & SOC 2 across multi-product environments Enterprise threat modeling & acquisition risk assessments Current focus – AI Governance: Embedding GenAI risk into enterprise GRC frameworks Designing controls for data leakage, prompt risk & misuse Building AI-driven tooling for threat intelligence & risk visibility I operate at the intersection of execution and program ownership, working closely with Engineering, Legal, Product, and security leadership. Open to opportunities where I can build or scale GRC and AI governance in product-driven organizations.

Location

Bengaluru

AI stack

claude code

claude

codex

gemini

kimi

ChatGPT

Work experience

Security Risk Management Specialist at Cloudflare, Sep 2025 - Present · 1 yr 1 mo, Bengaluru, - Restructured and enhanced the enterprise risk register, incorporating AI-specific risks and improving overall risk visibility and prioritization - Led enterprise-wide threat modeling initiatives, identifying key risks, mitigations, and control gaps across multiple business units - Integrated frameworks such as MITRE ATT&CK and ATLAS into risk management processes to strengthen control mapping and threat coverage - Conducted targeted risk assessments for acquisitions, supporting secure integration into Cloudflare’s environment - Automated risk and GRC workflows using Python scripts and AI-based agents, reducing manual effort and improving efficiency - Built an internal AI-powered threat intelligence tool, mapping threat actor TTPs to existing controls and generating risk relevance scores

Governance Risk and Compliance Analyst at Flexera, Dec 2023 - Sep 2025 · 1 yr 10 mos, Bengaluru, - Redesigned the Third Party Risk Management (TPRM) process, reducing assessment turnaround time by 15% while improving coverage of emerging risks including AI services - Implemented a policy management platform, enabling stronger governance through segregation of duties, auditability, and timely policy lifecycle management - Designed and rolled out a technology risk register, with plans for organization-wide adoption - Led ISO 27001:2022 and SOC 2 compliance initiatives across multiple products, supporting customer assurance and regulatory alignment - Managed customer-driven security assessments, addressing risk concerns and strengthening trust in Flexera’s product suite

Security Engineer at Paytm, May 2023 - Dec 2023 · 8 mos, Noida, - Built and led a brand monitoring and threat intelligence program, managing a team of 2 and leveraging tools such as Izologic and XVigil - Partnered with Public Affairs and external platforms to mitigate fraud, impersonation, and data leakage risks - Worked with engineering teams to identify and reduce code leaks and data exposure across deep and dark web sources

Associate Consultant at EY, Jan 2022 - May 2023 · 1 yr 5 mos, Gurugram, - Led engagements with financial services clients, advising CISOs on risk posture, threat landscape, and mitigation strategies - Managed a team of 8 analysts delivering risk assessments, gap analysis, and remediation planning - Supported clients in enhancing cybersecurity maturity and compliance frameworks - Contributed to RFP responses and solution design, aligning client needs with delivery capabilities

Analyst at EY, Oct 2020 - Dec 2021 · 1 yr 3 mos, Gurugram, Haryana, India

Internship Trainee at Power Grid Corporation of India Limited, Jun 2019 - Jul 2019 · 2 mos, New Delhi, Delhi, India, Summer Internship at Power Grid Corporation of India Limited- Telecom, under the guidance of Senior GM (Telecom) Sh. Doman Yadav. We were given in-depth knowledge of various tools and techniques used by PGCIL to keep the Telecom Infrastructure running. We were also trained upon the operations aspect, which included know hows of Sourcing of raw materials, Maintaining of existing infrastructure, Traffic Management and Client relations.

Education

Bachelor’s Degree, Electrical, Electronics and Communications Engineering, jaypee institute of information technology

Senior Secondary, Non Medical, Delhi Public School, Faridabad