Looking for a job

Akankshya Mohapatra

@akankshyamohapatra

Message

IT Risk and GRC professional at ANNAPURNA FINANCE, leading ISO 27001 governance and audit readiness.

India

Message

What I'm looking for

I'm seeking opportunities in GRC, IT Risk Advisory, Information Security Consulting, and IT Controls.

At ANNAPURNA FINANCE, I lead information security governance, GRC, and audit readiness activities, including ISO/IEC 27001 and SOC 2 implementation support. I coordinate assessments from planning and evidence collection through remediation and closure.

Previously, I managed IT risk and compliance activities at DELHIVERY and supported IT audit and technology risk engagements at DELOITTE USI. My work has included ITGC testing, vendor risk assessments, and SOX documentation, including Risk Control Matrices and control narratives.

Experience

Work history, roles, and key accomplishments

Current

Associate Manager – IT Compliance & Operations

Current

Annapurna Finance

Dec 2024 - Present (1 year 10 months)

Lead information security governance, GRC, IT compliance, cybersecurity, IT risk, security assurance, and audit readiness activities. Coordinate security requirements across business, IT, Engineering, Infrastructure, Risk, Compliance, Legal, and Procurement.

ISO 27001 SOC2 GRC IT Risk Management Security Audits Vendor Risk Management Control Testing Policy Development Access Management Change Management Audit Readiness Risk Register RCM KPIs KRIs

Associate Program Manager – IT Risk & Operations

Delhivery

Jan 2023 - Dec 2024 (1 year 11 months)

Managed IT risk, GRC, cybersecurity compliance, information security controls, technology governance, security assurance, and audit readiness activities supporting SOC 2, ISO/IEC 27001, and ITGC requirements.

IT Risk GRC SOC2 ISO 27001 ITGC Security Audits Risk Assessment Vendor Risk Management IAM PAM Change Management Control Testing RCM KPIs KRIs

Associate Solution Advisor – IT Audit & Technology Risk

Deloitte USI

Jan 2022 - Dec 2023 (1 year 11 months)

Delivered IT audit, technology risk, GRC, cybersecurity compliance, security assurance, and internal control assessments for global enterprise clients. Supported SOC 2 readiness and ISO/IEC 27001 assessments.