Looking for a job

Nitu Kumar Sharmaa

@nitukumarsharmaa

Information Security and GRC specialist at Aexonic who integrated ISO 27701 and ISO 42001 into existing security architectures.

India

Message

At Aexonic, I managed GRC frameworks and internal audit programs, and led third-party risk assessments by reviewing vendor evidence and assigning risk ratings. I also integrated ISO 27701 and ISO 42001 into existing security architectures.

Previously, at Evolent Health, I developed a CSIRT framework and SOPs connecting SOC threat detection with GRC incident reporting. At Rattan Enterprises, I directed SOC operations and represented the organization in audits covering ISO 27001, SOC 1/2/3, HIPAA, and NIST CSF.

Experience

Work history, roles, and key accomplishments

Sr. Analyst – Information Security & GRC

Aexonic

Nov 2023 - Mar 2025 (1 year 4 months)

Orchestrated internal audit programs using ISO 27001:2022 Lead Auditor expertise and designed corporate GRC frameworks. Led end-to-end Third-Party Risk Management and managed compliance roadmap updates for ISO 27701 and ISO 42001.

ISO 27001 GRC TPRM Audit Risk Management Compliance ISO 27701 ISO 42001 ServiceNow Jira

Analyst – Incident Response & Information Security

Evolent Health

May 2020 - Jul 2023 (3 years 2 months)

Led internal audits and gap analysis on ISMS, architected the corporate CSIRT framework, and authored SOPs. Evaluated risk treatment plans and used SIEM/EDR tools to gather forensic context during incidents.

ISO 27001 ISMS Gap Analysis CSIRT運用 Incident Response SIEM EDR Splunk ArcSight Risk Management

Security Analyst

Rattan Enterprises

May 2018 - May 2020 (2 years)

Directed 24x7 SOC operations and managed a team of security analysts. Represented the organization during external audits for ISO 27001, SOC 1/2/3, HIPAA, and NIST CSF, and authored security process documentation.

SOC Operations ISO 27001 SOC 1 SOC 2 HIPAA NIST CSF Incident Detection Team Management Documentation