harsh soni

I'm currently supporting ISO/IEC 27001:2022 implementation and audit engagements at CLA Global Indus Value Consulting, from ISMS scoping and risk assessments through control implementation, evidence validation, and audit readiness.

I lead SEBI-CSCRF engagements for Merchant Banker REs, assess applicable requirements, align policies and controls, and help clients close gaps for compliance readiness. I also conduct third-party risk assessments and ITGC audits covering access, changes, incidents, backups, and operational controls.

Previously at SecureKal, I implemented and sustained ISMS programs across clients in software, manufacturing, food, media, travel, engineering, and shipping. I developed security policies, performed gap and risk assessments, delivered awareness training, and supported ISO 27001 internal audits.

I began in VAPT, identifying web application and network vulnerabilities through Nessus, Ngrok, Nmap, and manual testing for SQL injection, XSS, and CSRF. I bring practical experience across compliance, audit, endpoint security, mobile security, and vulnerability assessment.