HARSH DAVDA

At Phonon Communications Pvt. Ltd., I managed risk and compliance assessments using Scrut Automation, automating 75% of audit documentation and supporting internal audits. I also maintained risk registers, control documentation, and audit evidence aligned with ISO/IEC 27001:2022 Annex A.

I monitored AWS CloudWatch logs and system activity for anomalies, supporting technology risk monitoring and incident escalation. I coordinated with Big Four audit firms during external audits and supported security and compliance requirements for clients in the BFSI and Aviation sectors.

I reviewed VAPT findings with engineering and QA teams, assessed risks, and tracked remediation of security control gaps. I also conducted assessments against PCI DSS, SOC 2, and BCMS requirements, and supported security awareness and phishing simulation programs.

In my Crypto Threat Intelligence Platform project, I built continuous monitoring to detect copycat domains targeting crypto exchanges, with threat scoring based on signals including fuzzy matching and domain age. I also built and deployed a CIFAR-10 classifier using AWS SageMaker, EC2, and S3, serving predictions through a Flask API. I’m ISO/IEC 27001:2022 Lead Auditor certified and interested in technology audit, risk management, and internal control frameworks.