Open to opportunities

Alka Vaghela

@alkavaghela

Message

I build ISO 27001 compliance programs, automate GRC monitoring, and lead risk and audit readiness.

India

Message

What I'm looking for

I'm looking to extend my ISO 27001 governance, audit, and risk-management foundation into privacy-specific frameworks as part of a newly independent compliance function.

I've led ISO 27001:2022 implementation and end-to-end GRC activities at RRD India, including internal and third-party risk assessments, vendor due diligence, customer assurance responses, and certification audit support.

I build compliance programs from the ground up, translating control frameworks into evidence-based reporting, dashboards, and continuous monitoring for security controls, exceptions, and risks. As a CISM-certified ISO 27001 Lead Auditor and Lead Implementer, I've also led internal audits and mentored teams across ISMS activities.

Previously, I supported client ISO 27001 certification at TechDefence Labs and built web and ERP applications as a software engineer. I'm ready to extend my governance and audit foundation into privacy-specific frameworks within an independent compliance function.

Experience

Work history, roles, and key accomplishments

Senior Engineer - Cybersecurity & IT Governance

RRD India

Jan 2022 - Jan 2026 (4 years)

Led the complete implementation and audit process of ISO 27001:2022 standards and managed end-to-end Governance, Risk & Compliance activities aligned with ISO 27001:2013. Conducted internal and third-party risk assessments, automated GRC processes, and supported external certification audits.

ISO 27001 GRC Risk Assessment Vendor Risk Management Audit Compliance Automation Reporting