Open to opportunities

Prakhar Bajpai

@prakharbajpai

Message

IT audit and risk professional specializing in PCI DSS, ISO 27001, and regulatory compliance.

India

Message

What I'm looking for

I am seeking a role focused on IT audit, GRC or information security where I can lead compliance programs, improve controls, and drive risk-reduction through cross-functional collaboration.

I am an IT audit and risk management professional with hands-on experience in regulatory and assurance audits across payment and banking domains.

I have led and supported Internal, External and Regulatory IT audits, PCI DSS certification efforts, ISO 27001:2022 audits, and RBI C-Site audits, ensuring compliance and operational resilience.

I conduct Risk Control Self-Assessments, prepare IT risk registers and policies, and drive access governance and data-driven KPI/KRI reporting for senior management.

I bring strong analytical, project and vendor management skills, an ISO 27001:2022 Lead Implementer certification, and a track record of recognitions for timely closure of regulatory observations and PCI DSS implementation.

Experience

Work history, roles, and key accomplishments

Current

Assistant Manager 2

Current

SBI Card

Apr 2025 - Present (10 months)

Led and executed IT audits, regulatory compliance (PCI DSS, ISO 27001, RBI) and risk assessments to improve control effectiveness and resolve audit findings; coordinated cross-functional stakeholders and external auditors.

IT Audit PCI DSS ISO 27001 Risk Assessment Change Management Data Analysis Regulatory Compliance

Assistant Manager 1

SBI Card

Nov 2022 - Mar 2025 (2 years 4 months)

Conducted comprehensive internal and regulatory IT audits (ITGC, DR, backup, CMDB) and led evidence collection and remediation tracking to ensure compliance and operational resilience.

IT Audit ITGC Disaster Recovery Backup Audit Evidence

Management Trainee

SBI Card

May 2022 - Nov 2022 (6 months)

Supported IT governance and cybersecurity initiatives, implemented RBI IT directives, and performed IT general control assessments and monthly access reconciliations.

IT Governance Governance Inventory Management Reporting