Aashish Khadka

Cyber Security professional with 5+ years of experience in IT audits, governance, risk and compliance, vulnerability assessment, and penetration testing. Passionate about strengthening security posture and delivering compliant, resilient systems.

Information Security Consultant at EFIS AG (2026-03 – Present)

• Conducting ISO 27001 internal audits, gap assessments, supporting organizations in implementing and maintaining ISO 27001 controls, policies, procedures, and risk management processes
• Performing SWIFT CSP assessments to evaluate compliance with mandatory and advisory security controls to the clients.

IT Auditor at Biz Serve IT Pvt. Ltd (2019-07 – 2024-09)

Conducting IT audits covering IT governance, policies, procedures and IT system configurations for banking clients

• Delivered Information Security Governance, Risk & Compliance services for banking, telecom and software development clients
• Internal and External IT audit scoping, planning, and defining the audit objectives, identifying risk areas, controls testing, and recommending effective IT controls
• Supported ISO 27001 implementation and continuous improvement activities, including policy development, control framework alignment and internal audit readiness to the banks.
• Conducting SWIFT CSP assessment against mandatory and advisory controls and supporting security attestation to the commercial banks
• Documenting, presenting, and follow up of audit findings
• Performed third-party security risk assessments and due diligence, and reviewing vendor's security posture
• Firewall rule review, operating system and database configuration review
• Providing security awareness on topics like phishing, cyber hygiene, password policies, GRC frameworks, security vulnerabilities to the clients

MSc in Cyber Security – Nottingham Trent University (2024-09-30 – 2025-10-13)

BSc in Computer Science and IT – Sagarmatha College of Science & Technology, Tribhuvan University (2016 – 2020)