Member of Group Corporate Audit team with the responsibility of IT risk assessment & Information security audits across Bajaj group companies & respective verticals which includes Bajaj Finance, Bajaj Auto Finance, Bajaj Housing Finance, Bajaj FinServ Direct & Bajaj Financial Securities.Performed information security and compliance audits like ISO 27001:2013, ISO 22301:2019, IRDAI, PCI DSS and SEBI regulations. Also, reviewed FinTech businesses like BajajPay Wallet, UPI, and BBPS.Played a key role in setting up the RBI Cyber KRI submission process which includes making of SOP, collection of data from respective stakeholders and validation to ensure accurate reporting of KRI values as required by RBI.Reviewed IT infrastructure for BFL as well as group companies with areas covered like ISMS Policies, Network and Firewall Management, VPN, BCP DR, Security Log Monitoring, DC & Cloud Infrastructure, AV, DLP, Patch Management, ADID management, VAPT, SCR, and brand protection.Performed technology audits of core ITGC areas like access controls & SOD, Incident & Change management, Backup & restoration, APIs & data flow, and uptime analysis of applications used in various products of lending business like personal loans, consumer product financing, e-commerce loan, gold loan, fixed deposits, business & professional loans. This included in-depth review of loan origination, loan management systems like Salesforce, FinnOne, Pennant.

As a Sr. Security Analyst and IT Auditor within the Compliance team, I was responsible for the web application and network VAPT using manual as well as automated tools like Nessus, Nmap, Sqlmap, and Burp Suite.Worked as an internal IT Security Auditor, I have successfully assisted the company in the certification audit of ISO 27001:2013 and SOC 2 with no non-conformities. Additionally, conducted security awareness training through phishing drills and campaigns using the Gophish tool.

Worked on security testing of the application against industry standards such as OWASP top 10