Open to opportunities

Hemanth Kumar Kanchi

@hemanthkumarkanchi

Message

I lead ISO audits and build scalable GRC compliance programs for SaaS companies.

India

Message

What I'm looking for

I'm looking to lead GRC, audit, and product-led compliance initiatives where I can translate ISO, SOC 2, GDPR, and third-party risk requirements into scalable SaaS workflows and automation improvements.

I've completed 60+ ISMS and PIMS certification audits at Prescient Security, leading auditors and delivering ISO 27001 and ISO 27701 audit reports for SaaS and IT services organizations across APAC, EU, and US time zones.

Previously, I completed 700+ third-party risk assessments at Viso Trust and supported product roadmap enhancements through vendor-risk evidence analysis. At Scrut Automation and DataBI Solutions, I guided ISO 27001, SOC 2, and GDPR implementations, completed around 80 ISMS projects, and performed 50+ independent internal audits.

Experience

Work history, roles, and key accomplishments

Current

Asst. Manager – ISO Audit Operations

Current

Prescient Security

Aug 2025 - Present (1 year 1 month)

Lead a team of auditors for a high-velocity Certifying Body, ensuring timely delivery of ISO 27001:2022 and ISO 27701:2019 audit reports. Act as Lead Auditor for complex SaaS environments, integrating compliance workflows with automation tools like Vanta, Drata, and Sprinto.

ISO 27001 ISO 27701 Lead Audits Team Leadership Vanta Drata Sprinto SaaS Compliance Automation

Third-Party Risk Auditor

Viso Trust

Sep 2023 - Aug 2025 (1 year 11 months)

Utilized customer discovery and vendor risk data to inform product strategy for third-party risk modules, evaluating vendor postures against SOC 2 and ISO 27001. Managed end-to-end remediation efforts with third parties to close identified security gaps and ensure regulatory alignment.

Third Party Risk Management Vendor Risk Assessment SOC ISO 27001 HIPAA HITRUST Customer Discovery Product Strategy

Information Security Delivery Consultant

Scrut Automation

Sep 2022 - Sep 2023 (1 year)

Guided clients through comprehensive Gap Assessments and Internal Audits for ISO 27001, SOC 2, and GDPR readiness. Authored and implemented organizational policies and procedures tailored to specific business risks and operational needs.

ISO 27001 SOC GDPR Internal Audit Policy Development Cross Functional Collaboration

Associate Consultant

DataBI Solutions

Dec 2019 - Sep 2022 (2 years 9 months)

Guided clients through comprehensive Gap Assessments and Internal Audits for ISO 27001, SOC 2, and GDPR readiness. Partnered with stakeholders to identify control deficiencies and develop tailored security policies and risk mitigation strategies to achieve full compliance.

ISO 27001 SOC GDPR Internal Audit Risk Mitigation Security Policies Access Control