Bhavitha Chavali

Cybersecurity Risk & GRC Analyst with 3.5+ years of progressive, hands-on experience architecting enterprise-grade risk management programs, governing third-party security lifecycles, and driving compliance across ISO 27001, GDPR, and HIPAA frameworks. Proven track record of reducing organisational risk exposure through automated assessment pipelines, cross-functional governance, and strategic security integration during high-stakes M&A transactions. Combines deep technical fluency in Palo Alto/Panorama, ServiceNow GRC, OneTrust, and Python automation with executive-level communication to translate complex security postures into board-ready business intelligence.

Security Risk & GRC Analyst (Embedded at Stryker) - UV Cyber - Hyderabad, India

(2024-01)

Enterprise Risk Governance & ITRM; Strategic Security Initiatives; Cross-Functional Leadership

• Own end-to-end IT Risk Management (ITRM) and Third-Party Risk Management (TPRM) programs, conducting security assessments for application and vendor onboarding from initial risk profiling through firewall, conditional, and full approval gates in OneTrust and ServiceNow GRC.
• Govern Palo Alto / Panorama firewall policy changes for vendor and network integration projects, enforcing least-privilege principles and reducing misconfiguration-related exposure.
• Perform pre-production application security reviews and Entra ID App Registration assessments (SSO, API integrations), identifying and remediating identity-related risks before deployment.
• Standardise and adjudicate VPN exception requests across Cisco AnyConnect, FortiClient, Check Point, and WireGuard, eliminating policy inconsistencies and strengthening remote access security posture.
• Led M&A application security due diligence during acquisition integration, mapping discovered control gaps against internal standards and tracking remediation to closure on ensuring zero security-related delays in business integration timelines.
• Maintain the enterprise IT risk register, owning risk owner assignments, remediation SLAs, and executive reporting cadences for leadership and audit stakeholders.
• Architected a Python-based GRC scanning tool using OWASP ZAP, automating repetitive security assessment workflows and accelerating vendor onboarding velocity while improving assessment consistency.
• Leverage BitSight and SecurityScorecard for continuous vendor security posture monitoring, proactively flagging degradation events before they impact organisational risk appetite.
• Partner directly with Network Engineering, Vendor Management, and IT Operations to align security controls with business objectives, translating technical findings into actionable remediation roadmaps.

Quality Assurance & Governance Analyst - Techwave Infotech Pvt. Ltd. - Hyderabad, India

(2023-03 - 2023-12)

• Designed and maintained governance frameworks in ServiceNow GRC and Graylog, achieving continuous alignment with GDPR and HIPAA requirements across multiple business units.
• Executed enterprise-wide risk assessments and compliance audits, identifying control gaps and driving remediation through a centralised risk register and executive management dashboards.
• Administered OneTrust data governance modules, enforcing data classification schemas and retention policies to support privacy-by-design and regulatory audit readiness.
• Produced governance metrics and compliance KPIs for senior leadership, enabling data-driven investment decisions on control enhancements and risk mitigation strategies.

Security Analyst (Intern) - Cybervie - Remote / Hyderabad, India

(2022-06 - 2023-02)

• Monitored and triaged security alerts and events in a fast-paced SOC environment, escalating critical incidents and coordinating with SOC and IT teams on incident response workflows.
• Assisted in vulnerability tracking and initial threat assessment, building foundational expertise in security operations, risk identification, and cross-team incident coordination.

M.Tech - Embedded Systems - Sri Venkatesa Perumal College of Engineering & Technology, Puttur (2023 - 2025)

B.Tech - Electronics & Communication Engineering - Sridevi Women's Engineering College, Hyderabad (2018 - 2022)