Looking for a job

pragya shrey mishra

@pragyashreymishra

Message

Information Security and GRC professional at Fino Small Finance Bank, reducing repeat audit observations by 30–40%.

India

Message

What I'm looking for

I'm seeking mid-level Information Security, GRC, Cybersecurity Risk, or AI Governance roles across India's BFSI, fintech, and technology sectors.

At Fino Small Finance Bank, I lead information security risk assessments across banking, payments, and insurance, aligned with ISO/IEC 27001, PCI DSS, and RBI requirements. This work has reduced repeat audit observations by approximately 30–40%.

I manage regulatory compliance and audit activities, including RBI inspections, UPI/NPCI assessments, and ISO surveillance audits. More than 90% of audit findings were closed within defined timelines.

I also govern the VAPT lifecycle, from scoping and execution through remediation tracking and reporting, reducing high and critical vulnerabilities by approximately 25–35% per cycle. My work includes security reviews and control effectiveness assessments across applications, infrastructure, networks, and cloud environments.

Previously, at C-Edge Technologies, I supported cybersecurity governance, risk assessments, audits, and VAPT for client banks. I’m certified as an ISO/IEC 27001 and ISO/IEC 42001 Lead Implementer, and I’m interested in applying my GRC experience to information security, cybersecurity risk, and AI governance.

Experience

Work history, roles, and key accomplishments

Current

Assistant Manager - Information Security

Current

Fino Small Finance Bank

Dec 2025 - Present (10 months)

Led enterprise-wide information security risk assessments and managed regulatory compliance and audit activities, achieving closure of over 90% of audit findings within defined timelines. Governed the end-to-end VAPT lifecycle and performed third-party and vendor security risk assessments.

ISO 27001 PCI DSS RBI Cyber Security Framework NPCI VAPT Risk Assessment Audit Management TPRM GRC Security Reviews Control Effectiveness Awareness Training

System Analyst - Information Security Management

C-Edge Technologies

Aug 2023 - Nov 2025 (2 years 3 months)

Strengthened cybersecurity governance by aligning organisational controls with ISO/IEC 27001, RBI Cyber Security Framework, PCI DSS, NPCI, and internal banking policies. Conducted enterprise-level risk assessments, supported audits, and managed VAPT activities end-to-end.

ISO 27001 RBI Cyber Security Framework PCI DSS NPCI Risk Assessment Audit Management VAPT TPRM Security Reviews Incident Governance Root Cause Analysis

Risk Management Intern

SBI General Insurance

May 2023 - Aug 2023 (3 months)

Assisted in enterprise information risk identification and assessment across underwriting, claims, and IT functions. Supported risk mitigation planning and compliance documentation in line with IRDAI regulatory requirements.

Risk Assessment Compliance IRDAI Enterprise Risk Management Infosec