Open to opportunities

Aryan Neupane

@aryanneupane

Message

I build GRC risk registers, controls, and audit evidence aligned to ISO 27001 and NIST CSF.

Nepal

Message

What I'm looking for

I'm looking for an early-career GRC or cybersecurity role where I can support risk assessments, control testing, audit evidence, and ISO 27001 or NIST CSF implementation while continuing to grow my technical security skills.

I've supported GRC work at Synthbit Technologies by building risk registers, control registers, control ownership matrices, and executive reporting aligned with ISO/IEC 27001:2022 and NIST CSF 2.0.

I also developed the simulated VertexOne Digital Services enterprise GRC implementation, covering risk assessment, treatment, control testing, evidence tracking, audit findings, corrective actions, and remediation reporting. My technical security background includes web application testing and vulnerability assessment using Burp Suite, Nmap, Nikto, Gobuster, and Kali Linux.

Experience

Work history, roles, and key accomplishments

Junior GRC Analyst

Synthbit Technologies

Jul 2026 - Aug 2026 (1 month)

Applied ISO/IEC 27001:2022 and NIST CSF 2.0 concepts to practical GRC scenarios, mapping framework requirements to control and risk documentation. Developed and maintained risk registers, control registers, and control ownership matrices to support risk treatment planning.

ISO 27001 NIST CSF Risk Assessment Risk Security Controls Evidence Management CAPA