Experience

Table of Contents

Download resume (PDF) →
#

Gurugram, India · August 2025 – Present

Leading enterprise-scale GRC engagements across financial services and regulated industries.

Lead audits against ISO 27001, NIST CSF 2.0, and the RBI Cyber Resilience Framework — covering control assessments, gap analyses, and remediation prioritisation with CXOs, InfoSec, and Risk teams
Advise clients on risk-based control adoption, balancing regulatory compliance, operational feasibility, and cost — driving the full audit lifecycle from scoping to closure
Develop commercial proposals translating regulatory and technical requirements into viable GRC solutions, supporting business development and deal closures

US & India · August 2024 – August 2025

Senior Associate — Cybersecurity (Gurugram, IN · Apr–Jul 2025)

Designed and engineered Microsoft Purview-based DLP and data governance solutions for PwC’s Managed SOC services, enabling scalable deployment across multiple enterprise clients
Led Database Activity Monitoring (DAM) implementation across 900+ databases for a Fortune-scale US logistics client — strengthening SOX compliance, insider threat detection, and audit readiness

Data Risk & Privacy Associate 2 (Atlanta, GA · Aug 2024–Jan 2025)

Served as trusted advisor for a global enterprise on secure GenAI adoption (Copilot for M365), addressing data leakage, governance, and responsible AI risks
Delivered executive-ready recommendations bridging privacy, cybersecurity, and emerging AI risks for senior leadership

Bangalore, India · December 2021 – August 2022

Served as Information Security Officer with full ownership of the ISO 27001:2013 ISMS implementation.

Led end-to-end ISO 27001 implementation — from risk assessment to certification readiness
Established Vulnerability Management, Incident Response, and Asset Exposure Monitoring programs, enabling continuous visibility into organisational risk posture
Maintained risk registers and tracked remediation of control deficiencies
Conducted phishing simulations and delivered security awareness training to 100+ employees
Embedded security into business operations by partnering with engineering, product, and leadership

Pune, India · July 2019 – December 2021

Built the security infrastructure underpinning HSBC’s mobile banking applications.

Led backend development of a Digital Security Platform supporting iOS and Android mobile banking — enabling secure authentication, authorisation, and trusted device management
Designed and implemented solutions across GCP and on-prem environments for high-risk financial workloads
Recognised as Cyber Champion for driving secure development practices across engineering teams

Master of Engineering in Cybersecurity — University of Maryland, College Park · GPA 3.966/4.0 RSA Conference Security Scholar ‘24

Bachelor of Technology in Computer Engineering — SVNIT, Surat · 8.44/10

Diploma in Cyber Law — Asian School of Cyber Laws, Pune

Credential	Issuer
CISSP	(ISC)²
GIAC Security Essentials (GSEC)	GIAC / SANS
Associate Cloud Engineer (GCP-ACE)	Google Cloud
Certificate of Cloud Security Knowledge (CCSK)	CSA
Azure Fundamentals (AZ-900)	Microsoft