Looking for a job

Sanjeev G Nair

@sanjeevgnair

Message

I deliver ISO, SOC 2, and security compliance audits for global clients.

India

Message

I’m Sanjeev and i have 2 years of experience in GRC and Information security I've Led 20+ SOC 2 Type I & II and 35+ ISO audit engagements at INTERCERT INC for clients across financial services, technology, healthcare, and SaaS.

I handle audit planning, control mapping, walkthroughs, evidence review, control testing, gap identification, documentation, and reporting. My work includes ISMS assessments, ITGC testing, privacy reviews, and cloud security assessments aligned to ISO/IEC 27001, 27017, 27018, 27701, and GDPR.

Earlier, I supported ISO 27001 compliance preparation at Baseel Partners and investigated security events using Microsoft Sentinel and Google Chronicle at Scybers India. I'm a Lead Auditor certified in ISO/IEC 27001, ISO/IEC 27701, and ISO/IEC 42001.

Experience

Work history, roles, and key accomplishments

Current

Risk and Compliance Associate

Current

Intercert Inc

Dec 2025 - Present (9 months)

Executed 20+ SOC 2 Type I & II and 35+ ISO/IEC 27001, 27017, 27018 & 27701 audit engagements for global clients. Performed end-to-end internal and compliance audits, including planning, control testing, and reporting.

SOC2 ISO 27001 ISO IEC 27017 ISO IEC 27018 ISO 27701 ITGC Control Testing Risk Assessment GDPR Cloud Security Audit Planning Evidence Review

Cyber Security Internship

Baseel Partners LLP

Sep 2025 - Dec 2025 (3 months)

Supported ISO/IEC 27001 compliance documentation development and formal audit preparation activities. Reviewed information security policies and controls for regulatory alignment with ISO 27001 and GDPR requirements.

ISO 27001 GDPR Compliance Documentation Policy Reviews Gap Analysis

Cyber Security Project Trainee

Scybers India Private Limited

Sep 2024 - Feb 2025 (5 months)

Monitored and analyzed security events using SIEM platforms (Microsoft Sentinel, Google Chronicle). Conducted incident analysis, threat investigation, and supported incident response operations.

Microsoft Sentinel Google Chronicle SIEM incident analysis Threat Investigation Incident Response