Looking for a job

Bronson Dias

@bronsondias

Information security GRC professional at Aditya Birla Finance Limited who improved audit readiness by 30% through an ISO 27001-aligned ISMS program.

Canada

Message

At Aditya Birla Finance Limited, I led an ISO 27001-aligned ISMS governance program that improved audit readiness across business functions and increased first-time audit acceptance by 30%. I also standardized enterprise risk methodology with a centralized risk register, reducing manual risk review time by 25%.

I led third-party risk governance for SaaS and technology vendors, reducing high-risk gaps by 20%, and directed cloud compliance monitoring using AWS Config and Security Hub. I also coordinated business continuity exercises, including BIA reviews and disaster recovery simulations aligned with ISO 22301.

At Harjai Computers Pvt. Ltd – Client: Aditya Birla Capital, I supported ISO 27001 implementation, cloud compliance governance, and GDPR privacy compliance. I conducted vendor security risk assessments and developed executive compliance dashboards tracking KPIs.

Earlier, at Confidis Advisory Services and San InfoSec and Consulting, I worked on IT risk, audit, and business continuity engagements. I hold an ISO/IEC 27001 Lead Auditor certification and am preparing for CISSP and CIPP/C certifications.

Experience

Work history, roles, and key accomplishments

Retail Associate

Loca Quality Market

Jun 2025 - Mar 2026 (9 months)

Provided customer service and supported retail operations at a local market.

Team Leader – Information Security Governance, Risk and Compliance

Aditya Birla Finance Limited

Jun 2023 - Nov 2023 (5 months)

Led ISO 27001-aligned ISMS governance, improving audit readiness by 30% and reducing third-party risk gaps by 20%. Managed compliance programs, cloud monitoring, and business continuity exercises.

ISO 27001 ISMS Risk Management Third Party Risk Cloud Compliance AWS Config Security Hub Business Continuity ISO 22301 Audit Readiness Stakeholder Management

Information Security Risk Analyst and Consultant

Harjai Computers Pvt. Ltd

Mar 2022 - Jun 2023 (1 year 3 months)

Implemented ISO 27001 and enterprise risk management processes, strengthening cloud compliance and GDPR readiness. Conducted vendor risk assessments and developed executive dashboards.

ISO 27001 Risk Management Cloud Compliance CIS Benchmarks GDPR Vendor Risk Assessment Compliance Dashboards Security Awareness

Consultant – IT Risk, Audit and Compliance

Confidis Advisory Services

Apr 2019 - Feb 2022 (2 years 10 months)

Led IT risk and BCM audit engagements for financial services clients, identifying critical control gaps and delivering remediation roadmaps. Developed enterprise security policies and supported BCM governance.

IT Audit Risk Management ISO 27001 BCM RTO RPO Targets Policy Development NIST COBIT Stakeholder governance

Associate Consultant – Information Security and Risk Management

San InfoSec and Consulting

Sep 2017 - Mar 2019 (1 year 6 months)

Conducted IT risk and BCM audits, identifying control gaps in backup governance and disaster recovery. Prepared audit reports and supported centralized governance tracking.

IT Risk Management BCM Audit Reporting ISO 27001 Governance Tracking