Conducted risk assessments and designed security controls for a background verification system handling sensitive identity data (Aadhar, PAN, address, work history).

Performed vulnerability assessments and secured API endpoints to prevent unauthorized access to PII.

Collaborated with developers to implement encryption and access management policies, aligning with industry best practices.

Ensured data security and compliance by identifying and mitigating risks in data verification workflows and third-party integrations.

Strengthened the company’s ISMS by updating the ISO 27001:2013 framework to align with ISO 27001:2022 controls, achieving a 30% reduction in compliance gaps.

Developed and maintained a comprehensive risk register, identifying 50+ risks and reducing vulnerabilities by 25%.

Conducted assessments on 15+ systems, identifying critical gaps and reducing exploitable vulnerabilities by 40%.

Assisted in creating the SOA and implementing 10+ security controls, achieving a 95% success rate in data protection.

Collaborated with cross-functional teams to enhance security controls and ensure adherence to industry best practices.

Gained hands-on experience in IoT operations by developing and executing 5+ Arduino-based projects, bridging theory with real-world applications.

Conducted research on IoT security vulnerabilities, identifying potential threats and exploitation methods.

Researched and analyzed Incident Response (IR) frameworks, improving response efficiency by 20% and contributing to a 30% increase in cybersecurity readiness.

Presented findings that boosted compliance with international security standards by 25%.

Developed IR best practices that reduced simulated incident response time by 15%, reinforcing the value of structured frameworks in national cybersecurity.

Contributed to a project, reinforcing the importance of structured frameworks in enhancing national cybersecurity readiness.