Prasanna Kumar

I’m an Information Security GRC Analyst with 4.2 years of experience across Governance, Risk & Compliance, Information Security, Third-Party Risk Management, security audits, and regulatory compliance. I’m hands-on with ISO 27001:2022, NIST CSF 2.0, SOC 2, HIPAA, and GDPR, and I focus on turning assessments into clear remediation and measurable progress.

In my recent role, I coordinated enterprise GRC governance activities—risk management, compliance monitoring, remediation tracking, and audit readiness updates. I oversaw TPRM by validating vendor risk assessments, reviewing remediation plans, and ensuring timely closure of high-risk findings, while aligning ISMS documentation and policies to ISO/IEC 27001:2022.

Previously at Infosys, I performed information security risk assessments, conducted control testing and gap analysis aligned to ISO/IEC 27001:2022 and NIST CSF 2.0, and supported internal and external audits through structured evidence collection and observation tracking. I also contribute to cloud security governance across AWS and validate controls against organizational policies and ISO/IEC 27001 requirements.