GRC Analyst (Intern)
I am a GRC Analyst (Intern) with experience from Jan 2026 to Present at Ascella Infosec. I conducted Test of Design (ToD) and Test of Operating Effectiveness (ToE) for 45 IT controls with 95% control effectiveness. My current focus is on IT compliance and control tracking dashboards.
Developed automated cloud security assessment framework using Python, Boto3 (AWS SDK), and Azure SDK to evaluate IAM policies, security group configurations, encryption status, and logging compliance against CIS benchmarks and NIST 800-53 controls. Built automated compliance reporting engine generating SOC 2, ISO 27001, and HIPAA control evidence reports from cloud infrastructure configurations, reducing manual evidence collection time by 45. Implemented risk scoring algorithm incorporating CVSS metrics, control effectiveness ratings, and business criticality factors to prioritize security findings for remediation planning.
Jan 2026 – Present
Conducted Test of Design (ToD) and Test of Operating Effectiveness (ToE) for 45 IT controls across SOC 2 (CC1-CC9), ISO 27001 (Annex A), and GDPR requirements, documenting test procedures, sampling methodologies, and exceptions with 95% control effectiveness. Performed risk-based IT assessments across eight client environments covering cloud infrastructure (AWS/Azure), network architecture, application security, and data protection controls by identifying assets, evaluating risks, assessing control gaps, assigning risk ratings, and recommending remediation priorities. Developed and maintained IT compliance and control tracking dashboards covering 85+ controls across multiple frameworks, monitoring control status, testing progress, evidence collection, remediation activities, and audit readiness through periodic stakeholder reporting. Collaborated with cloud engineering teams to perform configuration reviews of AWS environments, validating IAM policies, security groups, S3 bucket permissions, CloudTrail logging, GuardDuty findings, and encryption controls against organizational security baselines and compliance requirements.
MBA in Cybersecurity Management • Aug 2024 – May 2026
B.Tech in Computer Science and Engineering • Jul 2019 – Jul 2023
Interested in collaboration or just want to say hello? Feel free to reach out!