Looking for a job

Ganesh Kalla

@ganeshkalla

Message

I lead information security GRC, ISO 27001/42001, SOC 2 readiness, audits, and enterprise risk management.

India

Message

What I'm looking for

I'm looking to lead information security GRC and compliance programs, including ISO 27001, ISO 42001, SOC 2, risk management, audit readiness, and practical governance improvements across cross-functional teams.

I'm leading enterprise compliance initiatives at Millipixels Interactive LLP, implementing ISO/IEC 27001:2022 ISMS and ISO/IEC 42001 AIMS while building integrated GRC coverage for SOC 2 and regulatory requirements.

I translate security, contractual, and regulatory requirements into practical controls, policies, risk registers, audit evidence, and remediation plans. My work spans AI governance, third-party risk, internal audits, control testing, management reviews, and continual improvement.

At RR Donnelley, I led a seven-member internal audit team delivering 240+ audits annually and achieved zero non-conformities in ISO 27001 external audits for two consecutive years. I improved audit closure through streamlined CAPA tracking and stakeholder follow-up.

Across Wipro and Mahendrada Softtech Solutions, I've supported SOC audit readiness, ISMS implementation, risk assessments, vendor reviews, vulnerability and patch-management oversight, and security awareness programs across IT, ITeS, and BFSI environments.

Experience

Work history, roles, and key accomplishments

Lead Compliance Manager

Millipixels Interactive LLP

Nov 2025 - Sep 2026 (10 months)

Leading ISO/IEC 27001:2022 ISMS and ISO/IEC 42001 AIMS implementation, including governance, risk management, and audit readiness. Establishing integrated GRC framework covering ISO 27001, ISO 42001, SOC 2, and regulatory requirements.

ISO 27001 ISO 42001 SOC GRC Risk Assessment CAPA TPRM AI Governance Policy Development Azure AWS IAM Vulnerability Management Secure SDLC Change Management GDPR PCI DSS

Specialist-Cybersec & ITG

RR Donnelley

Jun 2023 - Nov 2025 (2 years 5 months)

Led a 7-member internal audit team covering 240+ audits annually, achieving zero non-conformities in ISO 27001 external audits for two consecutive years. Managed audit reporting, CAPA tracking, and third-party risk assessments.

ISO 27001 Internal Audit CAPA Risk Assessment TPRM Patch Management Gap Analysis Management Review Meetings

Compliance Specialist

Wipro Limited

Feb 2022 - Jun 2023 (1 year 4 months)

Supported SOC 1 & SOC 2 audit readiness, achieving clean audit outcomes with reduced compliance gaps. Conducted internal audits, risk assessments, and improved CAPA follow-up mechanisms.

SOC ISO 27001 Risk Assessment Internal Audit CAPA Patch Management Disaster Recovery Change Management Stakeholder Engagement

Compliance Analyst

Mahendrada Softtech Solutions Private Limited

Oct 2015 - Feb 2022 (6 years 4 months)

Conducted internal audits and compliance checks aligned with ISO 27001, supported ISMS implementation, and managed vendor risk assessments. Assisted in incident reporting, RCA, and CAPA tracking.