Looking for a job

pallavi jain

@pallavijain2

Message

GRC Analyst at Resmed India Private Limited, managing ISO 27001 audits and third-party security assessments.

India

Message

At Resmed India Private Limited, I lead ITGC, ISO 27001, and compliance audit activities, assess control effectiveness, and identify security and compliance risks.

I conduct risk assessments and ISMS reviews aligned with ISO 27001 and ISO 27005. I also coordinate audit evidence, control testing, and remediation tracking across business and technology teams.

At KPMG Assurance and Consulting Services LLP, I conducted ISO 27001 audits and IT audits, reviewed control evidence, and assessed third-party risks. I also established an end-to-end Third Party Risk Management framework, including service risk profiling, assessments, and issue management.

At Fidelity Information Services (FIS) Global, I performed third-party risk management reviews and supported critical relationship assessments and internal audits. I hold an ISO 27001: 2022 Lead Auditor certification and a Master of Cyber Law and Information Security.

Experience

Work history, roles, and key accomplishments

Current

GRC Analyst

Current

Resmed India Private Limited

Oct 2025 - Present (1 year)

Lead ITGC, ISO 27001, and compliance audit activities, assessing control effectiveness and identifying security and compliance risks. Coordinated audit evidence collection, control testing, and remediation tracking across multiple business and technology teams.

ISO 27001 ISO 27005 ITGC Risk Assessment Third Party Risk Management Audit Evidence Management Audit Remediation Tracking Security Questionnaires Compliance Review

Information Security Specialist

Resmed India Private Limited

Oct 2024 - Sep 2025 (11 months)

Conducted third party risk assessment for Resmed vendors. Utilised risk classification model and scoring systems to assess the severity of vendor risk based on defined criteria.

Third Party Risk Assessments Risk Classification Scoring Systems Vendor Risk Management

Consultant

KPMG Assurance and Consulting Services LLP

Apr 2024 - Oct 2024 (6 months)

Conducted IT audits of internal systems, reviewed policies and procedures, and identified control weaknesses with recommendations. Performed comprehensive ISO 27001 audits and risk assessments based on ISO 27005 guidelines.

IT Audit ISO 27001 ISO 27005 Risk Assessment ITGC Third Party Risk Assessments Control Testing Audit Reporting

Associated Consultant

KPMG Assurance and Consulting Services LLP

Jun 2023 - Mar 2024 (9 months)

Established end-to-end Third Party Risk Management framework including service risk profiling, assessment, and issue management process. Prepared information security policies and updated previous versions.

Third Party Risk Management Issue Management Assurance Security Policies

Risk Analyst

Fidelity Information Services (FIS) Global

Jan 2022 - Jun 2023 (1 year 5 months)

Performed third party risk management reviews of new and existing vendors. Supported critical relationship management assessments and assisted in internal audits in accordance with risk management controls.

Third Party Risk Management Vendor Risk Assessment Critical Relationship Management Internal Audit Risk Control