Headline

Technical Specialist || Governance Risk & Compliance || Information Security ||

About

I am an IT professional with over 11 years of experience in Information Security, Governance, Risk & Compliance (GRC), and IT Service Management. Currently, I am working as a GRC Specialist – Information Security at HCLTech, where I manage enterprise-wide risk assessments, ITGC controls, RBAC reviews, vendor risk formalities, and ISO 27001 compliance. My career spans roles at Accenture, Ericsson, and Nokia, where I built strong expertise in risk management, internal audits, incident handling, and IT operations. I hold certifications in ISO 27001 Lead Auditor, ITIL Foundation V3, and CCNA, which strengthen my ability to drive security governance, policy compliance, and operational excellence. I am passionate about enhancing organizational security posture, driving process improvements, and enabling cross-functional collaboration to align IT security with business goals.

Location

Bengaluru

AI stack

claude

deepseek

Work experience

Technical Specialist at HCLTech, Mar 2023 - Present · 3 yrs 7 mos, Bengaluru, Karnataka, India, Risk assessment, Control testing. Identify potential risks or inefficiencies and develop recommendations for improvement Design, develop and implement a risk management test plan Work with internal control team to develop and maintain monthly metrics related to the audit process Direct Assistance - Performs year-end audit tasks under the guidance of our external auditors in order to reduce overall audit fees for the Company. Being single point of contact during audit and support it through Participating in implementation and review of control framework Providing input into the efficiencies, procedures and effectiveness of an evolving Internal Controls organization Preparing accurate, organized and concise reports and work-papers. Developing internal relationships

Senior Analyst at Accenture, Apr 2019 - Mar 2023 · 4 yrs, Bengaluru, Karnataka, India, Implementation of ISO 27001-2013 standard as per scope defined by Client. Empowering clients with an innovative, effective and efficient approach to Governance, Risk, and Compliance (GRC)  Monitoring, Reviewing and Ensuring that ITGC controls are enforced, and proper evidence are generated based on frequency for Audits.  Assisting in vendor compliance audit and ISO 27001 audits per organization audit plans.  Ensuring Adherence to external Standard, Regulatory and Contractual compliance requirements.  Working towards risk assessment framework in the organization.  Identification of Key Information Risks with Risk mitigations.  Carrying out:  Internal audit to ensure compliance to ISO27001 and client requirements.  Asset based & process-based risk management.  Liaising with:  Network team for conducting technical risk assessment audit.  Operations for process audit.

Incident, Change Management & Problem Management at Ericsson global India, Apr 2014 - Mar 2019 · 5 yrs, Bengaluru, Karnataka, India, Monitor the Impact on SLA – Daily and Month to Date (MTD). Drive teams and created Incidents till closure. Monthly strategy analysis based on the month-end SLA and the Availability reports. Innovation – Identification of Grey areas in the process, Learning the abnormalities of each team and providing innovative action plans for improvement. Inform teams of new ways of working and ensure other teams follow the process. Look at issues and abnormalities in the process and helps the team in finding the solution. Handling all escalations with the customer or internal and also Escalating to any department to address blockages in any Service Interruption. Host and drive problem review meetings periodically to discuss aged problems, closed problems for closure effectiveness, and known errors.  Identify and deliver opportunities for Change growth & improvements. Significant experience in Change Management and knowledge of an IT Change Management process. Present changes in the Change Advisory Board (CAB) meeting Guarantee that the change request has been moved to different states and closed finally & that CMDB entries are complete and accurate.  Synchronize the cross-functional teams including QA, UAT, Development and client’s release managers as requested for successful and timely releases. Liable to administer all enterprise releases of new applications and changes to existing applications for various clients. Create the release packages and verify the deployment approach, scripts, and implementation approach work products provided by the project teams. Answerable for documenting and running the implementation plan, rollback plan, and supervision of events during the implementation window. Planning and coordination of activities during the implementation of major and minor software releases and changes.

L2 Support Ran Engineer at Nokia, Mar 2010 - Mar 2014 · 4 yrs 1 mo, Mumbai, Maharashtra, India, Working on Incident tickets raised by L1 technicians until the resolution is met. Managing multiple Queues and maintaining the SLA of all incident ticket. Initiating Bridge calls for outage situation. Formal closure of all Problem tickets includes problem closure review analysis to enhance the effectiveness of closed problems. Arranging, running, documenting, and all follow-up activities relating to Major problem reviews (for P1 and all high visibility incidents) Making recommendations to senior management as necessary Assisting any issues encountered with services such as Call / Data Outage.

Education

B.tech, Computer Science, Punjab technical university