Naveen Jeevanantham
IT Audit | Technology Risk | GRC | ISO 27001 Lead Auditor
Hire this person
Send a job offer directly to this candidate
About
Certified ISO 27001 Lead Auditor and CCNA-certification with nearly one year of hands-on internship experience in IT Audit, Technology Risk, and GRC within a regulated healthcare SaaS environment. Actively contributed to ISO/IEC 27001:2022 implementation across 93 Annex A controls, supported Stage 1 audit walkthroughs, and assisted in ITGC/ITAC reviews, evidence collection, and vendor risk assessments. Skilled in regulatory compliance (HIPAA, GDPR, DPDPA), information security assessments, and compliance dashboard development.
Pursuing CC– ISC2 to deepen IT audit and risk management expertise. Eager to bring practical audit and technology risk exposure to an EY client-facing environment.
Experience
Cybersecurity Intern — IT Audit & Technology Risk at Healthcare SaaS (2025-07 – 2026-04)
ISO 27001 Implementation & IT Audit
- Supported ISO/IEC 27001:2022 implementation across all 93 Annex A controls within a healthcare SaaS environment, contributing to a successful Stage 1 audit by assisting in gap analysis, Statement of Applicability (SoA) documentation, and corrective action tracking.
- Assisted in audit walkthroughs and evidence collection across ITGC domains — access management, change management, and least-privilege enforcement — supporting ITGC and ITAC reviews on AWS and DevOps environments to assess design and operating effectiveness of controls.
- Conducted IT risk assessments for 10+ third-party vendors, evaluating data handling practices, API integrations, access controls, and contractual compliance with HIPAA, GDPR, and DPDPA; maintained a structured vendor risk register.
- Contributed to building the organisation's first compliance dashboard and ITGC review framework, enabling real-time visibility into key risk indicators, control health, and open remediation items for senior stakeholders and audit committees.
- Supported completion of enterprise security questionnaires and RFPs by coordinating inputs across DevOps, legal, and cloud teams, ensuring responses aligned with applicable regulatory compliance requirements and technology risk frameworks.
Education
B.Tech in Information Technology (2021 – 2024)
