Hitesh Said

I’m an aspiring Technology Risk and IT Audit professional, certified as an ISO/IEC 27001 Lead Auditor. I’ve been actively building toward roles in Technology Risk, Information Security, and IT Audit by combining structured control thinking with hands-on technical work.

Through 25+ active cases at Cyber Police Station, Nashik, I gained experience in cybercrime investigation, digital evidence analysis, and incident documentation. I performed digital forensic analysis using Cellebrite UFED, conducted web/APK analysis with threat hunting (including dark web monitoring and OSINT), and produced defensible advisory, vulnerability, and incident response reports. I also served as an Expert Witness, presenting technical findings to support judicial decisions.

I bring audit-ready capabilities across IT Audit & ITGC—access management, change management, control design and effectiveness testing, stakeholder interviews, evidence collection, control gap analysis, root cause analysis, and audit reporting. I also completed MIT xPRO work on the Equifax Data Breach, mapping exploitation and ITGC failures to NIST CSF domains to strengthen risk and control coverage.