Headline

Governance, Risk, and Compliance (GRC) | Internal Audit | ISO 27001 & 42001 Lead Auditor I ITSM

About

Information Security Specialist working in the information technology, Telecom and Banking Industries. Skilled in SOC Monitoring, IT Audit, Risk management, Incident Management, Service Management ,Data security, Governance, Compliance, Privacy, Security policies, Vulnerability Management, Cyber Security, BCP/DR. Hands on experience in conducting Infrastructure Risk Assessment, Application Risk Assessment & Validation Assessment Hands on experience in coordinating and conducting InfoSec auditing based on ISO 27001:2022. Certified in ITIL Foundation – IT Service Management. Certified in ISO 27001: Lead Auditor course. Specialized in IT Infrastructure, Systems and Security. Skilled in OS & Administration, Computer Networking & Security Concepts.

Location

Bengaluru

AI stack

claude

Work experience

Associate Manager at Atos, Jun 2025 - Present · 1 yr 5 mos, Hybrid, GRC, Information Security

Information Technology Internal Auditor at Eviden, Apr 2023 - Jun 2025 · 2 yrs 3 mos, Hybrid, • Conducting Cyber Security and Technology Controls audit engagements from planning to reporting and producing quality deliverables to both department and professional standards, while ensuring audits are completed timely and within budget. • Working closely with global Audit colleagues in the early identification of emerging control issues and reporting them in a timely manner to Audit management and business stakeholders. • Partnering with stakeholders, business management, other control groups (i.e., risk management, compliance, fraud prevention), external auditors, and regulators, establishing strong working relationships while maintaining independence. • Finalizing audit findings and use judgment to provide an overall opinion on the control environment by developing recommendations to strengthen internal controls Communicate audit findings to management and identifying opportunities for improvement in the design and effectiveness of key controls. • Recognizing the confidential nature of Internal Audit communications and access to information; exercising discipline in protecting the confidentiality and security of information in accordance with firm policy.

Client Security Manager at Atos, Nov 2020 - Mar 2023 · 2 yrs 5 mos, Bangalore Urban, Karnataka, India

Incident and Compliance Manager at Atos, Sep 2015 - Oct 2020 · 5 yrs 2 mos, Pune/Pimpri-Chinchwad Area, • Managed Service Automation Dashboard using RPA tool. • Troubleshoot issues related to projects, timesheets, and other common issues. • Managed daily activities, issue resolution, and communication across teams to meet client SLA. • Supported Extended Service Management Center team for 21 Business Services containing +350 Applications. • Provided appropriate inputs to the incident & problem management process & RCA preparation • Helped to drive group chats and bridge calls effectively to resolve incidents. • Handled conflict situations and help in quick decision while driving incidents. • Coordinated with different teams geographically in incident Bridge calls for quick and prompt resolutions. • Providing information to higher management which includes KPI Forecasting and PIs.

Associate Network Management at Wipro Infotech, Mar 2013 - Oct 2014 · 1 yr 8 mos, Greater Delhi Area, • Installation of operating system and system updates, patches, version upgrades per vendor recommendations. • Administering, hardening and Monitoring of Servers (Windows and Linux) and LAN connection. • Change Management: Prepare Implementation, backout and test plan for Change records. Perform risk and impact analysis for changes. • Configuration Management: CMDB audits and regular updates of CMDB. • Installation of hardware for IVFRT (Immigration, Visa and Foreigners Registration Tracking) LAN. • Programmer Assistant of ICS software used in IVFRT. • Installation and Maintenance of other software used in IVFRT. • Installing, configuring and administering Active directory, Puppet, Nagios, Apache and Nginx web server.

Network Associate at Wipro Infotech, Mar 2013 - Oct 2014 · 1 yr 8 mos

Education

B.Tech, Computer Science & Engg., Kamla Nehru Institute of Technology, Sultanpur

PG Diploma in IT Infrastructure, Systems and Security (PG-DITISS), Cyber Security Ethical Hacking ,Cyber Forensics, Data Centre Management,ITIL,ISO 27001, Centre for Development of Advanced Computing (C-DAC)