Open to opportunities

Sankalp Rajabhoj

@sankalprajabhoj

Message

Information security associate specializing in GRC, VAPT, and vendor compliance for payments.

India

Message

What I'm looking for

I seek roles where I can own GRC and VAPT activities, drive audit readiness, collaborate with vendors/clients, and grow technical leadership in security compliance.

I am an information security professional with over 1.5 years of focused experience in GRC, vendor compliance within the payments industry, security auditing, network security, vulnerability management, and penetration testing.

At Drona Pay I lead audit readiness, evidence collection, RBI-related submissions, vendor compliance coordination and implementation of endpoint management frameworks to align security posture with client requirements.

Previously I performed ISO/NIST information systems audits achieving a 96% compliance rate, conducted VAPT engagements, streamlined VAPT reporting to reduce preparation time by 30%, and designed hands-on training curricula that improved practitioners' threat identification by ~30%.

I hold CEH and CNSP certifications, have hands-on experience with Nmap, Nessus, Metasploit, Nuclei and Microsoft Sentinel, and I focus on delivering clear remediation, client communication, and measurable compliance outcomes.

Experience

Work history, roles, and key accomplishments

Current

Information Security Associate

Current

Drona Pay Pvt Ltd

Aug 2025 - Present (10 months)

Lead internal and external audit readiness, RBI-related submissions and vendor compliance coordination; implemented an end-to-end endpoint management framework and managed GRC monitoring and client communications.

GRC & Compliance Endpoint management VAPT Coordination Security Monitoring

Cyber Security Analyst

VCF Cyber Solutions Pvt Ltd

Apr 2024 - Jul 2024 (3 months)

Conducted information systems audits (ISO 27001/NIST) and VAPT for financial clients, achieving a 96% compliance rate in external audit and driving client acquisition through service presentations.

ISO 27001 Security Auditing Compliance Reporting Risk Assessment NIST

Corporate Trainer & Jr Developer

Brillect Tech Solutions

Oct 2023 - Apr 2024 (6 months)

Designed and delivered hands-on cybersecurity training and curriculum for technical professionals, improving threat identification by ~30% and delivering guest lectures to 200+ students.

Training Delivery Curriculum Design Hands On Labs Public Speaking Student Engagement

Cyber Security Intern

xIoTz Pvt Ltd

Dec 2022 - Apr 2023 (4 months)

Assisted vulnerability assessments and streamlined VAPT report generation, reducing report preparation time by 30% and producing actionable remediation reports that improved stakeholder adoption.

Vulnerability Assessment Report Automation

Cyber Security Intern

Vigilante Cyber Forces

Jun 2022 - Dec 2022 (6 months)

Contributed to VAPT using Nmap and Nessus and supported financial-sector security audits through evidence gathering and control analysis to ensure compliance.

Nmap Nessus Audit Evidence Financial Compliance