Open to opportunities

Andreana Lisa

@andreanalisa1

Message

Cyber Security GRC Engineer specializing in risk management, audit readiness, and compliance monitoring.

India

Message

What I'm looking for

I’m looking to grow in a GRC-focused cybersecurity role where I can own audit readiness, risk registers, and control gap remediation—using tools like Drata—and partner cross-functionally to clearly communicate risk posture to leadership.

I’m a detail-oriented Cyber Security Engineer specializing in GRC strategy execution, policy governance, risk management, and compliance monitoring. I support ISO 27001, PCI DSS, SOC 2, NIST, and GDPR-aligned programs through hands-on audit readiness, control gap analyses, risk register maintenance, and cross-functional collaboration, while communicating risk posture to leadership with dashboards and management reports.

In my current role, I maintain compliance in Drata by tracking control health, automating evidence gathering, and ensuring timely updates, while acting as a primary point of contact for client audits. I run internal PCI DSS audits and ISO 27001 gap assessments (Annex A), manage risk exceptions and acceptances across the lifecycle, and drive remediation of audit findings end-to-end—along with third-party vendor risk management, vendor scorecards, and due diligence oversight.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Engineer I

Current

Highradius

Sep 2024 - Present (1 year 10 months)

Supported GRC strategy execution by maintaining risk registers, control health tracking in Drata, and continuous compliance monitoring for ISO 27001, PCI DSS, SOC 2, and NIST. Performed ISO 27001 gap assessments and PCI DSS internal audits, managed risk exceptions and remediation tracking for client audits, and led KnowBe4/Adaptive security awareness administration.

GRC Compliance Monitoring Risk Management Risk Register Control Gap Remediation ISO 27001 SOC NIST PCI DSS GDPR Audit Readiness Audit Remediation Tracking Risk Exceptions And Acceptances Third Party Risk Management (TPRM)Drata KnowBe4 Adaptive Security

Education

Degrees, certifications, and relevant coursework

Jain Deemed-to-be University

Bachelor of Science, Forensic Science (Digital Forensics)

2021 - 2024

Grade: CGPA: 8.085

Activities and societies: Internships: International Forensic Science (IFS), Pune—questioned document examination, crime scene investigation, fingerprint analysis; Teachnook, Bengaluru—cyber security fundamentals and applied practices.

B.Sc. in Forensic Science with a specialization in Digital Forensics at Jain Deemed-to-be University (2021–2024). Completed the program with CGPA 8.085.