Looking for a job

Krishan Chaurey

@krishanchaurey1

Security GRC professional at Third Bridge assessing cloud and GenAI risks and applying AWS security patterns to practical controls.

India

Message

At Third Bridge, I run cross-functional security and GRC reviews across application, data, identity, change, incident, and resilience controls. I assess secure SDLC practices with Product, Engineering, and Compliance, including security requirements, risk reviews, testing evidence, and remediation.

I assess cloud and GenAI use cases for security and privacy risk, including least-privilege access, data classification, encryption, and prompt-injection risks. Where relevant, I apply Amazon Bedrock security patterns such as Guardrails, KMS, CloudTrail, CloudWatch, and private connectivity.

Previously, at Tide and Amazon, I supported security governance and technology-risk reviews in regulated fintech and enterprise customer environments. I also founded Aspen, where I established security and governance processes and built BCMS and recovery governance covering business impact analysis, recovery priorities, and backup and restore procedures.

Experience

Work history, roles, and key accomplishments

Current

Compliance Associate

Current

Third Bridge

Nov 2025 - Present (10 months)

Run cross-functional security/GRC reviews across application, data, identity, change, incident and resilience controls. Assess cloud and GenAI use cases for security/privacy risk and maintain control, risk and remediation records in OneTrust/ServiceNow.

Analyst

Tide

Sep 2024 - Oct 2025 (1 year 1 month)

Supported security governance in a regulated fintech environment, translating ISO 27001 requirements into practical controls. Performed technology/cloud-risk reviews and managed risk registers, vendor assessments, DPIAs, data mapping and BCMS evidence.

Specialist

Amazon

Nov 2022 - Sep 2024 (1 year 10 months)

Performed security and technology-risk due diligence for enterprise customers, evaluating cloud/application control environments. Translated customer and regulatory requirements into practical security controls and assurance evidence, and supported cloud security assurance across AWS-aligned environments.

Founder

Aspen

Oct 2020 - Oct 2022 (2 years)

Established an end-to-end security/governance baseline covering asset/data inventory, IAM/least privilege, secure software practices, security policies, incident response, vulnerability/risk tracking, vendor risk and continuity planning. Designed ISO 27001-aligned risk and control processes and built practical BCMS and recovery governance.