Open to GRC Roles
Governance, Risk & Compliance (GRC) Professional
I like getting to know how an organization actually works, then helping it build the kind of security & privacy program that holds up.
Cybersecurity was the first thing in engineering that really clicked for me — I earned my CEH before I'd even finished undergrad, and I've been building on it ever since. I'm a GRC professional with consulting experience across healthcare, financial services, telecom, and tech, and an MS in Cybersecurity from Georgia Tech, where my focus broadened into privacy and AI governance. What I love most about GRC is the variety — new projects, new frameworks, new people, every time.
Georgia Institute of Technology
Mar 2025 to May 2026
Accorian
Sep 2023 to Jul 2024
Grant Thornton Bharat LLP
Jul 2021 to Sep 2023
Five pieces of work that show how I operate, from the first assessment to a plan a team can act on.
Accorian
Healthcare and SaaS clients were auditing against ISO 27001, SOC 2, NIST CSF, and HIPAA separately, and Accorian needed a way to assess all of them consistently through its AI-enabled GRC platform.
I built a Common Controls Framework unifying ISO 27001, SOC 2 (all five Trust Services Criteria), NIST CSF 2.0, and HIPAA into a single control set, then authored the assessment questionnaire for Accorian's AI-enabled GRC platform, GORICO — questions across 27 domains spanning Governance, Legal & Privacy, IT-InfoSec, Third-Party Management, HR, and Physical Security, each mapped back to a CCF control.
I can turn a framework into something a platform can actually run on, not just a document.
Accorian
A biotechnology research organization was working toward its first SOC 2 attestation and needed to know where its controls stood.
I led the gap assessment across all five Trust Services Criteria — Security, Availability, Processing Integrity, Confidentiality, and Privacy — and built a detailed remediation roadmap to attestation readiness.
I can take a team from not knowing where it stands to a clear plan for reaching attestation readiness.
Grant Thornton Bharat
India's largest Credit Information Company needed its partners assessed against RBI guidelines, and needed to know which of its products were storing data outside India in violation of those same requirements.
I delivered risk assessments for 25+ new and existing partners, evaluating IT environments, security posture, and data handling before approval, and separately conducted data localization reviews across the credit bureau's products — mapping data flows through stakeholder interviews and product demos to flag violations and deliver a risk-rated, application-level remediation plan.
I can hold a consistent standard across many partners while still digging into product-level detail where it matters.
Grant Thornton Bharat
Two clients — India's largest Credit Information Company and a large public sector bank — each needed a consistent, auditable security baseline across more than 70 technologies, including Windows and Unix operating systems, web and database servers, and virtualization software.
I developed CIS Benchmark-aligned Secure Configuration Documents and automated review scripts in separate engagements for the credit bureau and the bank. For the bank, I went further, performing periodic configuration reviews against the SCDs and reviews of the automated scripts themselves.
I can build a reusable security baseline once and apply it responsibly across more than one client, not just hand off a document and move on.
Georgia Institute of Technology
Data Sharing Agreements hold privacy and security obligations in dense legal language.
As part of SafeInsights, an NSF-funded (National Science Foundation) project, I designed the methodology and engineered generative AI prompt strategies to extract, classify, and structure software, privacy, and security requirements from real-world Data Sharing Agreements.
Legal obligations can become structured software artifacts that support privacy-by-design and secure-by-design implementation.
Pick one to see where I've used it.
IAPP Westin Scholar Award (2025)
Inducted into IEEE-HKN (Eta Kappa Nu)
Inducted in IEEE's Honor Society as a Graduate Student in Spring 2025.
If you’re hiring for GRC, IT audit, Privacy, or AI governance work, I’d like to hear from you.