Final year B.Tech Cybersecurity student specializing in Cybersecurity GRC, Cyber Risk & Compliance, and Cyber Strategy & Governance. I build enterprise-grade governance frameworks, risk assessment methodologies, and security control audit toolkits that translate complex technical gaps into executive-actionable remediation roadmaps.
Core Focus Areas:
- Cybersecurity GRC — ISO/IEC 27001:2022 control mapping, gap assessments, and ISMS readiness
- Cyber Risk Assessment — Quantitative risk scoring (3×3 matrices), risk registers, and remediation tracking
- AI Governance — Algorithmic risk classification, bias mitigation frameworks, and responsible AI lifecycle models
- Third-Party Risk Management (TPRM) — Weighted vendor scoring, supply chain due diligence, and continuous monitoring
- Regulatory Compliance — RBI Cybersecurity Directions, DPDP Act 2023, NIST AI RMF, ISO 42001
| Project | Domain | Scope | Key Deliverables |
|---|---|---|---|
| iso27001-cyber-grc-assessment | ISO/IEC 27001:2022 • Cyber Risk • Gap Assessment |
35 controls assessed across Annex A themes (A.5–A.8) for a hypothetical Indian digital bank (1.5M customers). | • 3×3 Risk Matrix & 12-Risk Register • 180-Day Phased Remediation Roadmap • Interactive HTML Executive Dashboard • 10-Slide Board Presentation Outline |
| 🤖 ai-governance-tprm-framework | AI Governance • TPRM • Vendor Risk Scoring |
6 BFSI AI use cases classified across 3 risk tiers; 6 vendors scored using a weighted 6-domain formula. | • AI Risk Register (12 risks across 11 categories) • 25-Question Vendor Questionnaire • 10-Stage AI Lifecycle Stage-Gate Model • Interactive HTML AI & TPRM Dashboard |
GRC Consulting Thought Process:
| Project | Stack | Highlights |
|---|---|---|
| remote-reset-automation |
Java 17+ • Spring Boot • RFC 8040 • JUnit 5
|
• High-throughput RESTCONF CRUD engine ( • Thread-safe ConcurrentHashMap core + timing-safe Basic Auth security• 34/34 passing automated tests with live GitHub Actions CI |
| ai-product-feedback-intelligence-system |
Python • NLP Embeddings • LLMs • FastAPI
|
• Automated feedback pipeline ingesting and vector-clustering user signals • Real-time semantic deduplication and priority scoring for product backlogs |
| ai-operations-copilot |
Python • DevOps • SRE • Incident Response
|
• Deterministic triage engine executing automated diagnostic playbooks • Automated health checks, rollback verification, and structured audit logs |
| phishing-url-detection |
Python • Scikit-Learn • Cybersecurity
|
• Explainable security classifier evaluating domain entropy and URL syntax • Robust evaluation across realistic, non-leaking dataset partitions |
| ⚡ express-logging-middleware |
TypeScript • Node.js • Express
|
• Structured observability middleware with latency sampling & alert webhooks • Zero-dependency, production-ready logging utility |
| Cybersecurity GRC | ISO/IEC 27001:2022, ISO 42001, NIST AI RMF, RBI IT Framework, DPDP Act 2023, Risk Assessment, Control Auditing, Gap Analysis, ISMS |
| Cyber Risk & TPRM | Risk Registers, 3×3 Risk Matrices, Remediation Planning, Vendor Risk Scoring, Third-Party Due Diligence, Supply Chain Security |
| AI Governance | AI Risk Classification (Tiered), Algorithmic Bias Mitigation, Explainability (SHAP), LLM Guardrails, Responsible AI Lifecycle |
| 💻 Languages & Dev | Java, Python, TypeScript, JavaScript, SQL, Bash, Spring Boot, Express, FastAPI |
| 🗄️ Infrastructure | AWS, Azure, PostgreSQL, Redis, Docker, Git, GitHub Actions, Linux, CI/CD |
| 🧪 Testing & Quality | JUnit 5, Mockito, MockMvc, PyTest, AssertJ, Automated CI/CD Pipelines |
- Risk-Driven Thinking: Every technical decision mapped to business impact, regulatory exposure, and operational resilience.
- Framework Discipline: Applying structured ISO/NIST/RBI frameworks rather than ad-hoc security checklists.
- Executive Communication: Translating technical control gaps into board-ready remediation roadmaps with clear ROI.
- Security-First Engineering: Constant-time cryptographic verification, zero committed credentials, and defense-in-depth architecture.
