Umapathy M

Entry-level Information Security and GRC professional with ISO/IEC 27001 Lead Auditor certification and foundational knowledge in risk assessment, IT governance, compliance frameworks, and security controls. Skilled in supporting compliance activities related to ISO/IEC 27001, ISO 9001, and ISO/IEC 20000-1, with awareness of GDPR, HIPAA, and DPDPA. Seeking to contribute to IT governance, risk management, and compliance initiatives while supporting enterprise security programs.

Graduate Intern | Cyber Security & GRC - BonBloc AI

(2026-04)

• Supported ISO 9001, ISO/IEC 27001, and ISO/IEC 20000-1 audit and certification.
• Assisted in IT risk assessments, risk register maintenance, CAPA tracking, and compliance monitoring.
• Participated in internal audits, policy reviews, IAM governance, vendor risk assessment, and security documentation.
• Performed basic VAPT using Nmap, Wireshark, and OWASP methodologies.

Consultant Trainer - Experis IT Private Limited

(2025-02 - 2025-04)

Client: HCLTech

• Delivered ITIL-aligned training on governance, compliance, and service management processes.
• Conducted workshops on incident, change, and problem management based on ITIL best practices.
• Mentored participants on policy adherence, process documentation, and governance principles.

Claim Analyst – AR Department - Infinx Healthcare Services Pvt Ltd

(2024-08 - 2025-02)

• Managed claim validation, denial analysis, and documentation ensuring compliance with payer policies.
• Maintained structured reporting and audit-ready documentation supporting compliance requirements including HIPAA exposure.
• Prepared MIS reports supporting transparency, operational monitoring, and risk identification.

Intern – Academic Trainee - HCL Training & Staffing Services (HCLTSS)

• Gained exposure to IT operations, enterprise documentation, corporate workflow processes.
• Completed structured training aligned with enterprise IT service practices.

Research Intern - SISTMR Australia - Remote

• Performed network traffic analysis using Wireshark and basic vulnerability assessment.
• Strengthened skills in incident handling and proactive issue resolution.

Business Analyst - Cappricio Securities

• Supported client communication, business reporting, and coordination activities.
• Applied analytical skills to support operational processes and reporting accuracy.

B.Tech - Information Technology - Sethu Institute of Technology (2020 - 2024) Virudhunagar, Tamil Nadu