Looking for a job

Harshal Chavan

@harshalchavan1

Message

I’m an Information Security and GRC professional delivering ISO 27001-driven risk and compliance outcomes.

India

Message

What I'm looking for

I’m looking for a role where I can own GRC execution end-to-end—risk assessments, ISO 27001/SOC 2 readiness, audit evidence, and metrics—while strengthening IAM/RBAC and Security Operations. I thrive with teams that value structured RCA/CAPA and measurable outcomes.

I’m an Information Security and GRC professional with 3+ years of experience in ISO 27001 implementation, risk assessment, audit management, SIEM monitoring, and IAM/RBAC governance across fintech and technology environments.

I’ve helped reduce recurring audit non-conformities by 10-15% through structured root cause analysis and CAPA, and improved MTTR by 20% by redesigning incident tracking into Excel-based KPI dashboards. I’ve also sustained zero major audit deviations across ISO certification cycles by drafting and maintaining policies aligned with ISO 27001:2022 and NIST CSF.

In my roles, I’ve led ISO 27001 and SOC 2 certification outcomes for external clients by driving readiness assessments, statement of applicability (SoA) development, and audit evidence coordination. I bring Secure SDLC governance, third-party risk management, and executive-ready communication that translates technical findings into actions for engineering and business stakeholders.

Experience

Work history, roles, and key accomplishments

Current

Executive, Delivery Excellence

Current

Inadev India Pvt Ltd

Dec 2024 - Present (1 year 7 months)

Scoped and delivered ISO 27001:2022 and ISO 20000-1:2018 compliance projects, achieving zero major audit deviations across all audit cycles. Conducted risk assessments, implemented RCA/CAPA to reduce recurring non-conformities, and built dashboards that improved MTTR by 20% and SLA compliance by 15%.

ISO 27001 ISO 20000 1:2018 Risk Assessment ISO 27001 Annex A Mapping CAPA Third Party Risk Management MTTR SLA NIST CSF Incident Management Security Awareness Training Secure SDLC Agile Governance Jira Confluence Excel KPI Dashboards

Security Analyst

Neumetric India Pvt Ltd

Mar 2023 - Dec 2024 (1 year 9 months)

Led end-to-end ISO 27001 and SOC 2 compliance implementations for multiple clients, including readiness assessments, SoA development, evidence collection, and control mapping. Performed gap analysis and audits, reviewed network security configurations (TCP/IP, IDS/IPS, firewall policies), and supported remediation workflows while delivering security awareness training.