Digvijay Singh Chouhan

I’m a Governance, Risk, and Compliance (GRC) professional with 18+ years of experience helping regulated organizations strengthen information security, compliance, and technology governance. I design and operate compliance programs aligned with ISO 27001, SOC 2, ISO 22301, and HIPAA, with a strong focus on audit readiness and practical control implementation.

In my current role as a Data Security Manager, I lead the organization’s GRC program for an 80-person SaaS business. I coordinate annual surveillance and certification audits, manage evidence collection and remediation tracking, and successfully led the transition from ISO 27001:2013 to ISO 27001:2022, including policy harmonization and an additional transition audit.

I configure and administer Sprinto to automate evidence collection, continuous control monitoring, and compliance workflows, reducing manual audit effort while improving evidence consistency. I develop and maintain 60+ security policies and governance procedures (including user onboarding/offboarding, asset management, and security awareness), run third-party security assessments, and partner with engineering to embed security and compliance into product development and operations. I also establish cloud security governance across Microsoft Azure and AWS with identity and access management, secure provisioning, and security best practices.

Earlier, as a VP – IT Infrastructure & Security, I supported 35+ regulated banking clients through secure infrastructure, cloud governance, SIEM implementation, vulnerability assessments, and penetration testing (VAPT), along with incident escalation and business continuity/disaster recovery readiness. Across my banking career, progressing from IT Manager to AVP – IT, I built governance, audit coordination, and resilience practices for a 46-branch network, and I hold an ISO 27001:2022 Lead Auditor certification.