Rishipal Yadav

I work at the intersection of GRC, cloud security, and nation-state cyber threats — because security policy without technical depth, and technical security without policy context, are both incomplete.

Currently leading enterprise GRC audits at Uniqus Consultech, advising clients on ISO 27001, NIST CSF 2.0, and the RBI Cyber Resilience Framework. Previously at PwC (Atlanta & Gurugram) and Cyble building security programs from scrathc, and before that building secure authentication modules at HSBC.

I research how cyber threats intersect with geopolitics and critical infrastructure — currently working on US pipeline attack surface. I was selected as an RSA Conference Security Scholar ‘24, one of a small cohort chosen from across the universities in USA each year.

I also write plainly about all of this at not your CISO — for practitioners who want straight talk without the jargon.