# Balaji P

Balaji P is a remote worker on Himalayas, Cyber security GRC Auditor at Netrika Consulting India Pvt Ltd, based in India.

Source: https://himalayas.app/@balajip

```text
Cyber Security GRC Auditor at Netrika Consulting India, achieved zero major nonconformities in ISO 27001 certification assessments.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | India |
| Authorized to work in | India |
| Salary expectations | 172k+ INR |
| Job categories | GRC Auditor, Information Security Consultant, Information Security Analyst |
| Skills | Governance Risk and Compliance (GRC), ISO 27001, ISO 27701, ISO 42001, Enterprise Risk Assessment, Vendor Risk Management, Information Security Audit, Regulatory Compliance, PCI DSS, RBI Compliance, CERT In Compliance, NBFC PPI Compliance, SOC2, NIST SP 800 171, ISMS |
| LinkedIn | https://linkedin.com/in/balaji-ponnuri-414709250 |

## About

```text
At Netrika Consulting India Pvt Ltd, I managed GRC activities for AWS-hosted fintech lending platforms, implementing and maintaining ISMS, PIMS, and AI governance frameworks aligned with ISO/IEC 27001, ISO/IEC 27701, and ISO/IEC 42001.

I led internal, external, certification, and regulatory audit activities, coordinating evidence, corrective actions, and remediation. Those ISO/IEC 27001 certification assessments resulted in zero major nonconformities.

I also conducted 50+ third-party security assessments and vendor risk reviews, evaluating supplier security posture through questionnaires, evidence validation, and risk-based methods.

Earlier, at Advintek Consulting Services Pvt. Ltd. and Ramtech Consulting, I worked on security audits, risk assessments, compliance programs, and ISMS implementation. My experience includes ISO 27001, SOC 2, PCI DSS, RBI and CERT-In requirements, and security tools including Archer IRM and IBM QRadar SIEM.
```

## Experience

### Cyber security GRC Auditor

Netrika Consulting India Pvt Ltd. Jun 2023 - Apr 2026

```text
Managed Information Security Governance, Risk, and Compliance (GRC) activities for AWS-hosted fintech lending platforms, implementing and maintaining ISMS, PIMS, and AI Governance frameworks. Ensured compliance with ISO/IEC 27001, PCI DSS, RBI Master Directions, CERT-In guidelines, and NBFC/PPI regulatory requirements.
```

Skills: ISO-27001, ISO-27701, ISO-42001, PCI-DSS, RBI, CERT-In, AWS, Archer, SIEM, Crowdstrike, DLP, VAPT, Risk-Assessment, Vendor-Risk-Management, Audit-Management

### Sr. Information Security Analyst

Advintek Consulting Services Pvt. Ltd.. Sep 2021 - Aug 2022

```text
Ensured compliance with ISO 27001, SOC 2 Type II, and NIST SP 800-171 through continuous control assessments and compliance monitoring. Planned and conducted internal audits, compliance assessments, and control effectiveness reviews across telecom infrastructure and critical business systems.
```

Skills: ISO-27001, SOC2, NIST, Risk-Assessment, Internal-Audit, VAPT, Vendor-Risk-Management, Access-Reviews, BCP, DR迁移数据校验

### Information Security Analyst

Ramtech Consulting. Jul 2016 - Sep 2021

```text
Delivered ISMS implementation and consulting engagements aligned with ISO/IEC 27001, performing gap assessments, enterprise risk assessments, and internal audits. Developed and maintained ISMS documentation and supported SOC 2 compliance initiatives.
```

Skills: ISO-27001, SOC2, Risk-Assessment, Internal-Audit, IBM-QRadar, Vendor-Risk-Management, Compliance

### Process lead

Ramtech Consulting. Aug 2013 - Jul 2016

```text
Led day-to-day team operations in a KPO environment, ensuring achievement of SLA, KPI, productivity, quality, and turnaround time targets. Managed resource planning, task allocation, and quality assurance reviews.
```

Skills: Team-Leadership, SLA-Management, KPIs, Quality-Assurance, MIS-Reporting, Process-Optimization

## Education

### Jawaharlal Nehru Technological University

B.Tech / B.E., Mechanical Engineering. Grade: 70%

```text
Completed Bachelor of Technology in Mechanical Engineering with a grade of 70%.
```

## Tech stack

- Okta
- AWS CloudTrail
- OneLogin
- AWS WAF
- CrowdStrike
- AWS KMS

To contact Balaji, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Aditya Iyer](https://himalayas.app/@AdityaIyer): GRC Program Manager, Scrut Automation
- [Balaji Venkatesh](https://himalayas.app/@balajivenkatesh): Enterprise Security GRC Specialist, Purchasing Power
- [Raju Karudi](https://himalayas.app/@rajukarudi): Manager, GRC Engineering, Workstreet
- [Harshal Chavan](https://himalayas.app/@harshalchavan1): Executive, Delivery Excellence, Inadev India Pvt Ltd
- [Prasanna Kumar](https://himalayas.app/@prasannakumar9): Senior Information Security GRC Analyst, Veramed Data Services Private Limited
- [Vaishnavi Tandel](https://himalayas.app/@vaishnavitandel): Sr. InfoSec Analyst, Accelya
- [Hemanth Kumar Kanchi](https://himalayas.app/@hemanthkumarkanchi): Asst. Manager – ISO Audit Operations, Prescient Security
- [Kartik Sikka](https://himalayas.app/@kartiksikka): Lead Information Security Manager, Fujitsu Consulting India
- [Shailes Nandan](https://himalayas.app/@shailesnandan): Cyber Security Consultant – GRC & Compliance, Societe Generale Global Solution Centre
- [Rajeshwari Subbaiah](https://himalayas.app/@rajeshwarisubbaiah): Senior Consultant – GRC, Information Security, HTS Consulting Service