Open to opportunities

Pranay Agarwal

@pranayagarwal

Information Security & GRC professional specializing in ISO 27001 audits, control testing, and third-party risk management.

India

Message

What I'm looking for

I’m looking for a role where I can own control testing and ISO 27001/GRC assurance, partner with stakeholders, and strengthen third‑party risk governance through clear evidence, reporting, and remediation follow-through.

I’m a results-driven Information Security and GRC professional with experience in IT control testing, ISO 27001 audits, and Third-Party Risk Management (TPRM). In my current role, I perform quarterly design and operating effectiveness testing across access management, vulnerability management, and configuration management controls, documenting outcomes, control gaps, and remediation status.

I strengthen security governance and audit readiness by maintaining risk and control registers in ArcherGRC, managing end-to-end exception handling, and providing compliance dashboards and KRI reporting to improve visibility into control health and risk posture. I also support ISO 27001 compliance through gap assessments, audit walkthroughs, evidence validation, and Management Action Plans (MAPs), translating technical findings into actionable business insights.

Experience

Work history, roles, and key accomplishments

Current

Security Delivery Analyst

Current

Accenture

May 2024 - Present (2 years 2 months)

Conduct quarterly design and operating effectiveness control testing and manage compliance assurance activities across access, vulnerability, and configuration management controls. Maintain Archer GRC risk/control registers and oversee exception handling, remediation tracking, and ISO 27001 audit readiness.

Controls Testing Compliance Assurance Access Management Vulnerability Management Configuration Management Risk Register Archer GRC Exception Management Compensating Controls remediation KRI Reporting ISO 27001 Audit Walkthroughs Third Party Risk Management Security Questionnaires Least Privilege Contract Compliance

Technology Summer Analyst

Morgan Stanley

May 2023 - Jul 2023 (2 months)

Supported a SOX-regulated environment by designing controls-aware process enhancements to improve auditability and operational resilience. Documented risk touchpoints and IT control monitoring requirements and developed an error replay capability to strengthen data integrity and audit evidence quality.