At Reserve Bank of Information Technology, I manage cybersecurity audits from scoping and risk assessment through final reports. I audit regulatory bodies and assess regulated financial institutions against the RBI Cyber Security Framework and Master Directions.
I’ve authored audit checklists and guidelines that integrate evolving RBI regulations into standardized banking security architectures. My work also includes identifying control gaps, outlining remediation roadmaps, and validating controls through evidence review and log analysis.
At Yes Bank Ltd, I conducted ISO 27001 gap analyses and control testing, monitored Akamai Web Application Firewall, and supported third-party assessments and source code reviews. I also led a team of 35 consultants and managed quarterly regulatory submissions.
Earlier, at INDUSFACE, I manually validated application and network vulnerabilities, created custom WAF rules, analyzed logs, and developed custom scripts. My experience also includes network monitoring at Ernst & Young and LAN infrastructure support at Softnice India Private Limited.
