Hrutuja Jawale

I am an information security, privacy, and cybersecurity audit professional with hands-on experience implementing ISO/IEC 27001:2022, leading internal audits, and preparing organizations across BFSI, healthcare, and tech for certification readiness. I have advised on RBI MD and SEBI CSCRF compliance, conducted regulatory readiness assessments, and developed ISMS documentation including SoA, risk registers, policies, procedures, and control evidence.

I lead risk assessments across infrastructure, applications, and cloud environments, produce Risk Assessment Reports and Risk Treatment Plans, and manage third-party risk assessments and vendor scoring. I deliver clear audit findings and remediation guidance, conduct security awareness training, and collaborate with engineering, cloud/IT ops, and compliance teams to strengthen control maturity and assurance.