Rushikesh Rokade

GRC (Governance, Risk & Compliance) expert with 3+ years of applied experience leading information security audits, ISO 27001 implementation and gap assessments, enterprise risk management, and third-party/vendor risk programs. Co-founded and ran a cybersecurity practice, acting as in-house GRC lead — designing policies, control frameworks, and audit-ready documentation from scratch and simulating SOC monitoring, incident response, and executive risk reporting. Strong working knowledge of ISO 27001, ISO 27701, third-party risk management (TPRM), and data protection regulation (DPDP Act 2023), backed by a Computer Science & Engineering degree specializing in Cybersecurity & Forensics.

Looking to contribute this GRC, audit, and risk-management background to a Risk Advisory, IT Audit, or GRC Consulting function within a global professional services firm.

Cybersecurity Analyst – GRC - White Band Associates

(2026-04)

• Perform information security audits and gap assessments against ISO 27001 and internal control frameworks.
• Develop and maintain information security policies, procedures, and SOPs across network and endpoint environments.
• Conduct risk management activities — risk identification, assessment, and treatment planning — to support business continuity.
• Inspect and inventory organizational assets to strengthen asset management and continuity planning.

Co-Founder & Cybersecurity Analyst - The Black Pearls

(2024-02 - 2026-04)

• Acted as in-house GRC expert, leading enterprise risk assessments and risk profiling across internal systems and translating findings into prioritized, risk-based remediation roadmaps.
• Designed and implemented information security policies, SOPs, and governance documentation aligned with ISO 27001 and industry best-practice control frameworks.
• Owned end-to-end compliance activities, including control gap analysis, audit readiness, and evidence documentation to support internal and third-party audits.
• Simulated SOC monitoring and incident response workflows to strengthen the organization's operational risk and security posture.
• Built and presented executive-level risk and compliance dashboards, translating technical findings into business-risk language for leadership decision-making.
• Co-founded and scaled a virtual internship platform, overseeing governance, operations, documentation, and process optimization for student participants.

Ethical Hacking Intern - Edunexa Tech

(2024-01 - 2024-02)

• Conducted web application vulnerability testing and network reconnaissance/scanning.
• Compiled structured vulnerability assessment reports with remediation recommendations.

Cybersecurity Intern - Code Alpha

(2024-01 - 2024-03)

• Supported SOC alert monitoring and phishing-simulation exercises.
• Assisted with compliance documentation and risk-mapping activities.

B.Tech - Computer Science & Engineering (Cybersecurity & Forensics) - Sandip University (2026)