Open to opportunities

Aryan Maharjan

@aryanmaharjan

Message

GRC Analyst specializing in third-party risk management and compliance-ready security assessments.

Nepal

Message

What I'm looking for

I’m looking for a GRC/Third-Party Risk role where I can validate HITRUST/CRF and map controls to HIPAA, SOC 2, ISO, and GDPR. I want to work cross-functionally, produce audit-ready documentation, and help accelerate remediation with clear risk scoring and governance.

I’m a results-driven GRC and Third-Party Risk Management professional, conducting vendor risk assessments for Fortune 500 enterprises. I validate HITRUST CSF and Common Risk Framework (CRF) assessments against HIPAA, SOC 2, ISO 27001, and GDPR, using evidence review and policy analysis to pinpoint gaps in PHI/PII handling, access management, and incident response.

I review security policies, map controls to compliance frameworks, and present risk findings to senior leadership for approval and escalation decisions. In my recent role, I reduced remediation closure timelines by 25% and improved downstream workflow accuracy by 30% through an internal AI-powered compliance knowledge library and standardized control mapping templates.

Experience

Work history, roles, and key accomplishments

Current

GRC & Third-Party Risk Analyst

Current

SecurityPal

Apr 2025 - Present (11 months)

Conducted end-to-end third-party risk management for Humana, validating vendor HITRUST CSF and Common Risk Framework assessments against HIPAA/HITECH, SOC 2 Type II, ISO 27001, GDPR, and NIST CSF. Reduced average remediation closure timelines by 25% and downstream compliance workflow errors by 30% through evidence-based control validation, gap analysis, and audit-ready risk reporting.

Third Party Risk Management HIPAA SOC II ISO 27001 GDPR

Security Research Analyst Trainee

Code Rush / SecurityPal

Feb 2025 - Apr 2025 (2 months)

Investigated cyber threats and helped produce GRC-focused security policy and risk control reports aligned to NIST, ISO 27001, and HIPAA frameworks. Supported application of risk management and regulatory compliance requirements across healthcare and technology contexts.

Security Research GRC NIST CSF ISO 27001 HIPAA Risk Management

Cybersecurity SOC & Vulnerability Intern

TeamOne Technologies

Dec 2023 - Apr 2024 (4 months)

Assisted SOC operations with log analysis, vulnerability assessments, and threat detection using Linux CLI, Python automation scripts, and Splunk SIEM. Supported vulnerability scan triage and contributed to risk prioritization and remediation tracking using CVSS scoring standards.

SOC Operations Splunk Vulnerability Assessment Threat Detection CLI Python CVSS Security Monitoring Triage

Network & Security Intern

Classic Tech

May 2023 - Aug 2023 (3 months)

Supported network configuration, security monitoring, and troubleshooting in a live ISP environment. Assisted with routing protocol work, firewall rule management, and network access control activities.

Security Monitoring Troubleshooting Network Protocols Network Controls Network Security Access Management