Open to opportunities

andreana lisa

@andreanalisa

Message

Cyber Security Engineer specializing in GRC, SOC 2 readiness, and compliance automation to reduce audit risk.

India

Message

What I'm looking for

I’m looking for a GRC-focused cyber security role where I can own SOC 2, PCI DSS, and ISO 27001 readiness, improve control testing and evidence workflows with automation, and advise leadership using data-driven risk scoring and clear audit reporting.

I’m a detail-oriented Cyber Security Engineer focused on GRC and audit assurance—driving SOC 2 Type I & Type II readiness through Trust Service Criteria (TSC) mapping, control gap assessments, and evidence package development. At Highradius, I assess design and operating effectiveness of controls, streamline audit liaison (PoC) work, and communicate risk findings with remediation roadmaps to senior leadership.

I also strengthen compliance posture across PCI DSS, ISO 27001, and IT General Controls (ITGC), performing internal audits and Annex A gap assessments while supporting ISO-aligned policy and procedure implementation. I quantify risk with Cyber Security Risk Scores (CSS), manage risk exceptions and acceptances, and modernize audit response using Drata for continuous control monitoring and automated evidence collection—plus I lead phishing simulations and role-based security awareness via KnowBe4 and Adaptive.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Engineer

Current

Highradius

Sep 2024 - Present (1 year 9 months)

Led SOC 2 Type I/II readiness by mapping controls to the AICPA Trust Service Criteria, assessing design/operating effectiveness, and assembling auditor evidence packages while driving remediation across cybersecurity, access management, change management, and availability. Acted as audit PoC for SOC 2, PCI DSS, and ISO 27001, ensuring 100% on-time delivery of compliance artifacts and configuring D

AICPA TSC Control Mapping PCI Audit Phishing Analysis

Education

Degrees, certifications, and relevant coursework

Jain Deemed-to-be University

Bachelor of Science, Forensic Science (Digital Forensics)

2021 - 2024

Grade: 8.085 CGPA

Activities and societies: Internships: International Forensic Science (Pune) on questioned document examination, crime scene investigation, and fingerprint analysis; Teachnook (Bengaluru) on cyber security fundamentals and applied practices.

Earned a B.Sc. in Forensic Science with a specialization in Digital Forensics from 2021 to 2024. Completed internships in forensic science and cyber security fundamentals and applied practices.