Looking for a job

Rajeshwari Subbaiah

@rajeshwarisubbaiah

GRC Senior Consultant at HTS Consulting Service who delivered ISO 27001, ISO 27701 and SOC 2 audits with zero critical findings.

India

Message

At HTS Consulting Service, I independently executed cybersecurity risk assessments across applications, cloud infrastructure, vendors and new business initiatives. I assessed AWS, Azure and GCP security controls and recommended practical remediation aligned with CIS Benchmarks.

I led end-to-end ISO 27001, ISO 27701 and SOC 2 audit execution, from evidence validation through closure tracking, achieving zero critical audit findings. I also delivered Regulatory Compliance as a Service engagements for BFSI product clients under RBI and SEBI cybersecurity frameworks.

At GRM Technologies, I performed compliance gap assessments and control testing, and supported cloud security reviews. I’m actively building AI governance and AI risk-assessment capability, including NIST AI RMF, ISO/IEC 42001 and OWASP Top 10 for LLMs.

Experience

Work history, roles, and key accomplishments

Senior Consultant – GRC, Information Security

HTS Consulting Service

Sep 2024 - Jun 2026 (1 year 9 months)

Independently executed cybersecurity risk assessments across applications, cloud infrastructure, vendors, and new business initiatives. Led end-to-end audit execution for ISO 27001, ISO 27701, and SOC 2 engagements, achieving zero critical audit findings.

Security Risk Assessment Cloud Security AWS Azure GCP IAM Encryption Logging Network Security CIS Benchmarks ISO 27001 ISO 27701 SOC2 PCI DSS Third Party Risk RCSA PII Regulatory Compliance RBI SEBI

GRC / Information Security Consultant

GRM Technologies

Dec 2023 - Aug 2024 (8 months)

Performed compliance gap assessments and control mapping across ISO 27001, ISO 27701, SOC 2, PCI DSS, and RBI frameworks. Executed ITGC and control effectiveness testing, and supported cloud security posture reviews.

Compliance Assessments Control Mappings ISO 27001 ISO 27701 SOC2 PCI DSS RBI ITGC Access Management Change Management Incident Response RBAC PAM SOD Cloud Security IAM Encryption Logging DR BCP Vendor Risk Assessment

Talent Acquisition Analyst

TheMathCompany

Jul 2022 - Oct 2023 (1 year 3 months)

Managed end-to-end hiring for Information Security, GRC, and technology roles, building domain grounding in security frameworks and audit requirements.

Talent Acquisition Recruitment Infosec GRC

Lead Staffing Analyst

HiringHut Solutions Pvt Ltd

Dec 2020 - May 2022 (1 year 5 months)

Led technical recruitment for Information Security, GRC, and engineering roles across BFSI and product companies, partnering with hiring managers and reporting metrics to senior stakeholders.

Technical Recruitment Infosec GRC Stakeholder Management