Open to opportunities

Dharak Unjiya

@dharakunjiya

Message

ISO/IEC 27001 Lead Auditor driving third-party risk, compliance, and governance through data-driven audits.

India

Message

What I'm looking for

I’m looking for a GRC/Information Security role where I can lead TPDD and vendor risk assessments, perform compliance audits (ISO 27001/SOC 2/SEBI CSCRF), strengthen governance, and drive continuous improvement through clear reporting and evidence-based risk decisions.

I’m an ISO/IEC 27001:2022 Lead Auditor with hands-on experience in third-party risk assessment, compliance audits, and due diligence processes. In my current GRC Analyst role, I conduct TPDD and vendor risk assessments within timelines, perform risk analysis using reports and evidence, and maintain audit-ready documentation.

I bring a strong governance and control mindset from both internship experiences and ISO-aligned work, including supporting ISO 27001 ISMS implementation, SEBI CSCRF audit activities, and control mapping/gap analysis for ISO 27001, NIST, SOC 2, and GDPR. I focus on risk mitigation and remediation tracking, stakeholder collaboration, and clear audit reporting and dashboards to support continuous process improvement.

Experience

Work history, roles, and key accomplishments

Information Security Compliance Intern

TechD Cybersecurity Limited

Jun 2025 - Oct 2025 (4 months)

Supported ISO/IEC 27001 ISMS implementation and documentation and assisted with SEBI CSCRF audits for stockbrokers. Collected evidence, performed control checks, and helped prepare audit reports.

ISO 27001 SEBI CSCRF Compliance Audits Audit Reporting GDPR

Governance Risk Compliance Intern

PSY9 Security Consulting Pvt. Ltd.

Dec 2024 - May 2025 (5 months)

Performed control mapping and gap analysis for ISO/IEC 27001, NIST, SOC 2, and GDPR. Assisted with audit documentation and compliance tracking and supported policy drafting and updates.

ISO 27001 NIST SOC GDPR Control Mappings Gap Analysis & Compliance