Dev

Results-driven Cybersecurity Professional with over 4 years of experience in Governance, Risk, and Compliance (GRC), endpoint security, cloud security, and network security. Skilled in implementing compliance frameworks, conducting risk assessments, and developing policies to mitigate risks effectively. Proven ability to lead cross-functional teams and drive organizational security initiatives while ensuring regulatory adherence.

Passionate about leveraging emerging cybersecurity trends to enhance governance and security maturity. Currently pursuing CISSP certification to further strengthen expertise in security leadership and risk management.

Lead InfoSec at SS Supply Chain Solutions Pvt Ltd (2025-05 – Present)

Leading InfoSec strategy for the organization, overseeing compliance, risk, and security operations end-to-end.

• Leading enterprise-wide compliance efforts across ISO/IEC 27001:2022, GDPR, and India's DPDPA 2023, working with business units to close compliance gaps ahead of the next audit cycle.
• Built a 3-year security roadmap tying DLP, XDR, and cloud security investments directly to business priorities, giving leadership a clear path to a stronger defense-in-depth posture.
• Formed a cross-functional team to drive risk assessments and compliance rollouts, cutting down the back-and-forth that used to slow these initiatives.
• Act as the go-to voice for senior management on GRC and BC/DR strategy, helping shift the org from reactive fixes to proactive planning.

Lead Information Security at Trident Group (2022-12 – 2025-04)

Led SOC operations for 3500+ users, overseeing GRC initiatives and IT-security matters at the Madhya Pradesh location.

• Migrated core security tools (Web Proxy, EDR) to new platforms with almost no disruption to end users.
• Built an in-house endpoint compliance scanner from scratch, cutting reliance on costly third-party tools.
• Led internal audits and kept the org aligned with TPRM and ISO 27001 requirements — fewer surprises at audit time as a result.
• Put together GRC reports and dashboards that gave senior management a real-time read on risk posture, not just a quarterly snapshot.

Associate Information Security at Trident Group (2022-07 – 2022-12)

• Managed access controls, email security, and NGAV, tightening the org's first line of defense against phishing and unauthorized access.
• Ran root cause analysis on security incidents and turned findings into concrete mitigation steps, not just after-action reports.
• Worked directly with vendors on IT infrastructure improvements, closing gaps before they became real problems.
• Wrote security policies grounded in CIA (confidentiality, integrity, and availability) the kind people could actually follow, not just file away.
• Ran security awareness sessions that got employees genuinely engaging with the material instead of clicking through a slideshow.

Cloud Security Intern (AWS) at Aspire NXT Pvt Ltd (2020-10 – 2021-07)

• Implemented IAM policies and managed user permissions to enforce least privilege access across AWS resources.
• Deployed EC2 instances and S3 buckets for vulnerability assessment (VA) tools such as Nessus, ensuring comprehensive security assessments.
• Utilized AWS Config, Security Hub to monitor compliance with CIS benchmarks and AWS best practices, providing insights for infrastructure improvements.

Bachelor of Engineering in Computer Science and Engineering (Hons. in Information Security) – Chandigarh University (2018-07 – 2022-07)