Open to opportunities

Raju Karudi

@rajukarudi

Message

Cybersecurity GRC and AI governance leader delivering ISO audits and trustworthy, compliant AI systems.

India

Message

What I'm looking for

I’m looking to lead enterprise cyber GRC and AI governance programs end-to-end—driving ISO audits, AI risk frameworks, and measurable compliance outcomes—while building high-performing teams, partnering with CISOs/CROs, and using automation to keep audit readiness continuous.

I’m a cybersecurity GRC and AI governance leader with 20+ years of experience across Information Technology, Healthcare, BFSI, and Industrial Engineering. In my current role as Manager, GRC Engineering, I lead end-to-end cyber GRC program delivery, driving audit closure and risk treatment across SOC 2, ISO 27001, HIPAA, and PCI DSS engagements.

As an Associate Director & Practice Head for Cybersecurity GRC & AI Governance, I established and led an ISO 42001 AI Governance audit practice as Lead Auditor for AIMS engagements. I performed ISO 42001:2023 conformance audits (Stage 1 documentation reviews and Stage 2 implementation audits), conducted AI risk assessments aligned to ISO 42001 Annex A, and built repeatable AIMS audit checklists, evidence templates, and nonconformity frameworks.

I’ve also built security governance foundations and led enterprise risk programs, including advising C-suite stakeholders and coordinating cross-functional teams across Security, IT, Compliance, Risk, Audit, and Legal. I bring deep expertise in policies and controls such as IT SoX, ITGC, ISMS and BCMS, alongside supplier risk management, Secure SDLC/DevSecOps assessments, and application security testing (VAPT, DAST, SAST, and mobile application security).

My approach blends rigorous governance with measurable execution: I develop compliance frameworks, run gap assessments, and use compliance automation platforms like Drata, Vanta, and SecureFrame to track KPIs/KRIs and maintain continuous audit readiness. I mentor GRC teams, produce executive dashboards, and focus on responsible, trustworthy, and compliant outcomes—especially for AI systems.

Experience

Work history, roles, and key accomplishments

Current

Manager, GRC Engineering

Current

Workstreet

Nov 2025 - Present (8 months)

Leads end-to-end Cyber GRC program delivery across BFSI, healthcare, and technology clients, managing compliance milestones, RAID logs, and executive reporting. Drives closure of audit findings and remediation for SOC 2, ISO 27001, HIPAA, and PCI DSS engagements while coordinating cross-functional teams and mentoring GRC analysts.

GRC Program Management SOC ISO 27001 HIPAA PCI DSS Audit Remediation Gap Analysis Executive Reporting Compliance Automation Drata Vanta Secureframe Dashboards AWS GCP Azure

Associate Director – GRC & AI Governance

Accorian

Mar 2024 - Nov 2025 (1 year 8 months)

Established and led the firm’s ISO 42001 AI governance audit practice as Lead Auditor for AIMS engagements. Conducted ISO 42001:2023 conformance audits, AI risk assessments, and produced audit reports and corrective action follow-ups for clients across BFSI, healthcare, and technology.

ISO 42001 AI Management Systems (AIMS)AI Risk Assessment NIST AI RMF AI Governance Model Governance Algorithmic Accountability Transparency Data Governance Audit Reporting Root Cause Analysis Problem Management BC DR Planning Business Continuity

Manager – Audit & Compliance

Varutra Consulting

Apr 2023 - Mar 2024 (11 months)

Led and managed a team of information security professionals delivering on-site consulting projects. Conducted security audits using RBI, SEBI, and CERT-IN guidelines and developed compliance roadmaps, including third-party risk management support for vendor assessments.

Security Audits SEBI Guidelines CERT In Continuous Improvement Third Party Risk Management Vendor Assessment Risk Assessment Security Planning Stakeholder CxO Reporting

Information Security Risk Manager

Lebara

Sep 2022 - Mar 2023 (6 months)

Oversaw GRC functions aligned to organizational security objectives and served as custodian of information security policies and procedures. Conducted internal compliance audits, performed risk assessments, managed the risk register, assessed cloud environments for security compliance, and led business continuity planning and testing.

GRC Security Policies Internal Audit External Audit Support Risk Assessment Risk Register Security Assessments AWS Azure Business Continuity Planning

AVP – IT Security & Risk Mgmt

JPMorgan Chase & Co.

Sep 2017 - Aug 2022 (4 years 11 months)

Worked with line-of-business delivery managers to ensure adherence to JPMC security policies and completed required security assessments. Conducted supplier risk assessments, assessed Secure SDLC and DevSecOps implementations, reviewed SOC 2 reports, and managed critical supplier portfolio work with third-party information risk teams.

Secure SDLC DevSecOps VAPT DAST SAST Mobile Application Security Security Assessments

Global Manager – GRC

The Timken Company

Feb 2016 - Aug 2017 (1 year 6 months)

Executed global implementation of policies and standards to safeguard organizational information assets and third-party data. Designed, implemented, and evaluated IT General Controls to ensure SOX compliance and adherence to federal, industry, and India-specific regulatory requirements.

Governance Policy Implementation IT General Controls SOX Compliance Regulatory Compliance

Program Manager – Process & Gov

Unisys

May 2013 - Feb 2016 (2 years 9 months)

Designed and drove integration of ISO standards into a unified IMS framework across business units. Standardized managed security services processes and coordinated global security and compliance efforts to meet ISO 9001, ISO 20000, and ISO 27001 certification requirements.

ISO 9001 ISO 27001 IMS Integration Service And Data Centre Compliance

Senior Manager – Quality

Inatech

Jul 2011 - May 2013 (1 year 10 months)

Designed and implemented a QMS aligned to ISO 9001:2008, ISO 27001:2005, and CMMI v1.3. Served as Management Representative to lead ISO 9001:2008 certification and spearheaded ISO 27001:2005 compliance transition (UK & India).

QMS ISO 9001 ISO 27001 Management Representative ISO 9001 Certification

Manager – Quality Assurance

Virtusa

Jul 2010 - Jul 2011 (1 year)

Led CMMI v1.2 implementation across multiple business units, progressing the organization toward CMMI Level 5 maturity.

CMMI Level 5 Maturity Quality Assurance

Manager – Quality Assurance

Siemens Technology India

Nov 2007 - Jul 2010 (2 years 8 months)

Led CMMI v1.2 and ISO 27001:2005 implementations across multiple business units and served as an information security advisor. Implemented ISO 13485 plus 21 CFR Part 11 and 21 CFR Part 820 for the healthcare business unit.

ISO 27001 ISO 13485 21 CFR 820 Quality Assurance

Practice Lead QA

Logica CMG (A CGI Company)

Aug 2006 - Oct 2007 (1 year 2 months)

Designed and implemented ITIL-based processes and a QMS framework for DG-TAXUD (European Commission), aligned to ISO 9001:2008 and ISO 27001:2005. Served as practice lead for QA process setup and alignment to certification requirements.

ITIL ISO 9001 ISO 27001 DG TAXUD