Aditya Iyer

Own the end-to-end GRC program for a compliance-automation SaaS platform, reporting directly to the CISO and partnering
with engineering, product, and customer success — covering ISO 27001:2022, ISO 42001:2023, SOC 2 Type II, GDPR, DPDPA
2023, and NIST CSF 2.0.
• Served as primary internal liaison for the company's SOC 2 Type II audit conducted by EY, coordinating evidence collection.

Conducted several audits on various compliance including SOC2 and ISO 27001, and providing expert recommendations on how to secure the organization. Delivering quality client services to our wide range of clientele domestic and overseas, also manages expectations of client service deliveries. Developed various information security policies and procedures for organizations to better strengthen the

Conducted comprehensive security assessments within the Salesforce environment, employing advanced techniques to identify vulnerabilities and bypass security controls, while adhering to robust data security principles. Developed and executed intricate exploits to evaluate the effectiveness of IAM controls, aiming to achieve code execution and compromise systems within the Salesforce ecosystem.

Conducted red teaming assessments for clients, simulating real-world attacks to identify weaknesses in their security posture and provide recommendations for improvement. Conducted comprehensive web application audits for clients, identifying vulnerabilities and providing actionable recommendations for remediation. Performed dynamic and static security testing using tools such as Burp Suite, and o

Conducted physical audit, identifying vulnerabilities and providing actionable recommendations for remediation in 30+ pharmacy in IT security audits. Performed dynamic/static app security testing, source code reviews, and prioritized Security advisories for timely bug patching, mitigating risks. Created detailed reports of findings and recommendations for clients and internal stakeholders, highlig