Headline

Security Governance & Risk Oversight (GRC) | Information & Operational Risk Manager | Control & Regulatory Assurance | Executive Risk Reporting | Cyber, Privacy & Cloud Risk

About

I work at the intersection of Governance, Risk & Compliance (GRC) and executive decision-making — helping organizations move from reactive compliance to structured, defensible risk decisions. I am an Information Security Governance & Risk Manager (10+ years) with experience across Information Risk, Technology Risk, Operational Risk, Risk & Controls, and Regulatory Assurance in complex, regulated environments. 🔹 Role Positioning Aligned to roles such as: • Information Risk Manager • Security Risk Manager • Technology Risk Manager • GRC Manager / Governance Lead • Risk & Controls Manager 🔹 Enabling Leadership to Make Better Risk Decisions • Understand real risk vs perceived risk • Make informed risk acceptance decisions • Maintain audit-ready, scalable governance frameworks 🔹 Core Expertise • Governance, Risk & Compliance (GRC) frameworks • Information & Technology Risk Management • ISO 27001 & ISO 31000 aligned programs • Risk & Controls design, validation & assurance • Cloud risk governance (Azure, AWS) • Third-party / vendor risk governance • Executive risk reporting & decision support 🔹 How I Deliver Value • Translate regulatory & security requirements into practical governance models • Define control validation logic (what is valid vs noise) • Build risk registers and structured risk acceptance frameworks • Enable consistent, defensible audit outcomes • Improve governance clarity across cloud, infrastructure, and SaaS environments 🔹 Operating Style I operate in second-line (2LOD) governance environments that value: • Clear accountability • Documented decision rationale • Structured governance over firefighting My approach is calm, methodical, and governance-driven — focused on clarity, consistency, and decision confidence at scale. 🔹 Collaboration Experience Worked closely with Technology, Risk, Legal, Privacy, and Compliance stakeholders to strengthen: • Governance maturity • Cloud compliance posture • Third-party risk oversight • Enterprise risk visibility 🎯 Career Focus Manager-level roles in: • Information Risk • Technology Risk • Security Risk • Operational Risk • Risk & Controls • GRC / Governance Leadership The objective is not only compliance — but defensible decision-making.

Location

Gurugram

Work experience

Data Protection & InfoSec Compliance Lead(Security Governance, Risk & Controls Oversight) at Accenture in India, Jun 2022 - Present · 4 yrs, Gurugram, Haryana, India, •Provide second-line governance interpretation and risk visibility for regulated client environments across cyber, privacy, and cloud domains. •Define governance guardrails, risk acceptance structure, and control accountability aligned to ISO 27001. •Oversee enterprise and cloud risk assessments (Azure/AWS), including risk identification, treatment validation, exception management, and residual risk acceptance. •Provide executive-level risk visibility through structured dashboards, KRIs, and governance reporting to senior stakeholders. •Act as a trusted governance advisor to technology, privacy, legal, and risk leaders, translating regulatory and contractual requirements into practical governance models. •Support regulatory and client assurance activities by coordinating governance inputs, validating remediation plans, and ensuring sustained compliance posture.

Information Security Manager - Governance Risk & Compliance(GRC) at Tata Consultancy Services, May 2019 - May 2022 · 3 yrs 1 mo, Gurugram, Haryana, India, •Managed enterprise information security governance and risk management programs aligned to ISO 27001 and organizational GRC frameworks. •Led risk assessments, policy lifecycle management, and controls oversight to support internal audits, client assurance, and regulatory expectations. •Coordinated with delivery, infrastructure, and application teams to track risk remediation, exception handling, and compliance status. •Delivered structured governance reporting and risk insights to senior stakeholders to support informed security and compliance decisions.

Information Security Deployment Lead at Tata Consultancy Services, Feb 2015 - Apr 2019 · 4 yrs 3 mos, Noida, Uttar Pradesh, India, •Operated in a governance execution role deploying client-mandated security and access controls across offshore delivery centers for Fortune 500 programs. •Implemented access governance processes including periodic access reviews and remediation tracking, reducing access-related audit observations. •Supported client security and contractual compliance during program onboarding and transitions. •Coordinated internal audits, client assessments, and corrective action plans to maintain continuous audit readiness.

Mobile Application Test Lead at Tata Consultancy Services, Mar 2014 - Oct 2014 · 8 mos, Mumbai, Maharashtra, India, • Supported delivery governance and quality risk oversight for large-scale telecom applications operating in regulated, high-availability environments. • Coordinated test planning, release readiness, and client acceptance activities across multiple agile teams, ensuring delivery risks were identified, tracked, and resolved prior to production deployment. • Acted as a liaison between business stakeholders and delivery teams to clarify requirements, manage change impacts, and strengthen execution accountability. • Contributed to structured decision-making around release approvals by providing clear visibility into quality risks, dependencies, and readiness status.

Business Analyst at LTI - Larsen & Toubro Infotech, Feb 2010 - Feb 2014 · 4 yrs 1 mo, Bengaluru, Karnataka, India, •Worked with business and technology stakeholders to translate business requirements into delivery, control, and risk considerations across enterprise systems. •Built early exposure to risk identification, change impact assessment, and stakeholder communication in large IT programs.

Test Analyst at Nokia Siemens Networks, Mar 2009 - Feb 2010 · 1 yr, Noida, Uttar Pradesh, India, •Supported system testing and quality validation for telecom platforms, developing foundational understanding of enterprise delivery and control environments.

Education

B.Tech, Electronics and Communication, Maharaja Agrasen Institute Of Technology, Delhi

High School, Physics,Chemistry,Maths, DAV Dayanand Vihar