Prashant Maurya

I’m a Cybersecurity & IT Risk Advisory professional specializing in end-to-end security assessments, ITGC, SOX/ICFR compliance, and VAPT engagements across enterprise clients in the BFSI sector. I translate complex technical vulnerabilities into clear business risk and remediation priorities, aligned to frameworks like ISO 27001, NIST, and RBI guidelines.

In my current role as a Cyber Security Consultant (IT Risk Advisory & VAPT), I supervise and mentor a team of 3–6 associates across concurrent audit, regulatory compliance, and VAPT work—owning quality assurance and final reporting. I also act as a primary advisory liaison for external audits and regulatory inspections, contributing to “zero major non-compliance observations,” while presenting risk-rated findings and strategic mitigation plans to C-suite and senior stakeholders to accelerate remediation and strengthen the control environment.

I drive measurable control improvements through structured methodologies and targeted technical execution—standardizing 25+ Risk Control Matrices (RCM) and audit testing templates, building continuous monitoring workflows that reduced manual control testing by 20%, and redesigning access provisioning across 500+ ERP accounts to reduce privilege exposure by 25%. I’ve directed 20+ web/API/network VAPT engagements, validated 250+ vulnerabilities with OWASP Top 10 and CVSS to business risk mapping, and helped close 80%+ of critical and high-risk issues within SLA timelines; earlier, as a Cyber Security Trainer, I improved CEH/VAPT certification pass rates by 30% by delivering 50+ training modules.