GRC Builder
I am a GRC Builder with experience from February 2026 to present at Bengaluru. I conducted 100+ free medical camps across rural and marginalized communities in Rajasthan. My current focus is on making ISO, SOC 2, privacy, and AI governance requirements usable for teams.
Built a 45-prompt GRC operating library across 13 domains, including risk management, audit, policy writing, incident response, BCP, TPRM, AI governance and board reporting. Designed prompts around real governance work: evidence review, gap analysis, remediation plans, stakeholder notes, control mapping and implementation support, not generic chatbot output. Covered ISO 27001, ISO 42001, SOC 2, NIST CSF, NIST AI RMF, EU AI Act, GDPR, DORA, ISO 31000 and major security certification bodies of knowledge.
Created a local cyber decision-support tool using six AI security personas that deliberate independently before producing a Chief Arbiter verdict. Scored decisions across regulatory defensibility, practicality, board-readiness, specificity and risk quantification, then exported board-ready PDF outputs. Built for messy security questions where one answer is rarely enough: the value is in surfacing trade-offs, dissent, assumptions and defensible next steps.
Published a 24-page practitioner guide showing how ISO 42001 and NIST AI RMF can run as one AI governance programme without duplicated effort. Mapped ISO 42001 clauses and Annex controls to NIST AI RMF functions/subcategories, with a three-phase implementation playbook and gap register. Reached 7,800+ impressions on LinkedIn and was endorsed by AI, GRC and cybersecurity professionals as a useful comparison for implementation work.
Built an original privacy-audit handbook explaining ISO/IEC 27701:2025, PIMS concepts and the certification audit cycle in plain practitioner language. Added practical audit tooling: Annex A controls reference, auditor question bank, workpaper templates, nonconformity writing guide, glossary, flashcards and exam prep. Created as a community-first resource so privacy and GRC learners can understand audit logic, evidence quality and findings without expensive gatekeeping.
Designed a privacy knowledge and operating hub structured around the journey: Learn, Map, Build, Operate, Prove, Specialize, Grow and Protect Yourself. Included vocabulary, ISO 27701 guidance, cross-framework mapping, PIMS documentation pack, DSAR and breach playbooks, readiness checklist, CIPP study guide and privacy career roadmap. Built with a clear mission: make privacy knowledge open, usable and connected to personal autonomy, dignity and safer digital ecosystems.
February 2026 to present
Made ISO, SOC 2, privacy and AI governance requirements usable for teams by turning them into evidence packs, decision notes, control maps, templates and implementation guides. Built practical toolkits and checklists that reduce interpretation gaps between frameworks, auditors, founders, security teams and business stakeholders. Used AI-assisted workflows for control mapping, evidence review, policy drafting, document quality checks and executive-ready summaries while keeping human judgement central.
January 2020 to January 2021
Worked on ISO 27001-aligned security documentation and control thinking in a regulated, safety-sensitive airport environment. Supported infrastructure audit work across airport IT and security systems, reviewing operational readiness, asset reliability and control gaps across critical environments. Coordinated with airport operations, airlines, CISF, BCAS and technical teams, building confidence in stakeholder handovers and security as an operations enabler.
February 2021 to November 2025
Conducted 100+ free medical camps across rural and marginalized communities in Rajasthan to improve access to respiratory and orthopedic health screenings. Played a key role in establishing a rural community hospital that now delivers free diagnostic and primary healthcare services to residents across 20+ underserved villages. Designed bespoke travel experiences by analyzing guest preferences and coordinating complete arrangements for flights, accommodations, local transportation and cultural tours across Rajasthan.
B.Tech in Electronics, Instrumentation and Control Engineering • June 2018
Professional Certificate in Leadership and Communication • April 2026
Awarded by Mastermind Assurance on completion of the Lead Auditor Trifecta.
Exhibited using a Marvel/DC quiz-led engagement model, and fully sold official GHCI merchandise including plated project merchandise during live event operations.
Supported 100+ AI-native founders and builders through AI build events across Bengaluru under AIBoomi and AI Collective engagements.
Built a public portfolio that joins GRC, AI governance, privacy, cybersecurity writing, community leadership and practical implementation artifacts in one visible body of work.
AnitaB.org India
Supported Grace Hopper Celebration India, a 3-day celebration with 6,000+ delegates and 350+ sessions, workshops, exhibitors and speakers.
AIBoomi (formerly SaaSBoomi)
Helping conduct AI build events, founder sessions and hands-on community programmes for AI-native builders in Bengaluru.
The AI Collective, Bengaluru Chapter
Contributing to local AI community learning, events and practical adoption conversations.
Interested in collaboration or just want to say hello? Feel free to reach out!