Open to opportunities

Sreenatha Nagabhushana

@sreenathanagabhushan

Message

GRC consultant specializing in SOC, ISO, PCI DSS, GDPR and HIPAA compliance.

India

Message

What I'm looking for

I seek roles where I can lead SOC/ISMS/PIMS compliance projects, mentor teams, drive audit readiness, and strengthen organizational security and regulatory posture while growing into broader GRC leadership.

I am a Governance, Risk & Compliance (GRC) professional with four years of focused experience across SOC, ISO, PCI DSS, GDPR, HIPAA and SEBI frameworks, delivering end-to-end audits, compliance reporting and control evaluations.

I have led SOC projects, managed ISMS and PIMS engagements, prepared SOAs and ISMS policies, executed PCI SAQ A projects with AOC drafting, and produced SOC attestation and ISO audit reports while mentoring teams for consistent delivery.

I drive regulatory and standards alignment through risk assessments, control descriptions (DC-200), client training on SOC2/ISO/GDPR/HIPAA, and collaboration with cross-functional teams to strengthen compliance posture and remediation strategies.

Experience

Work history, roles, and key accomplishments

Current

GRC Consultant

Current

Ampcus Cyber

Apr 2024 - Present (1 year 7 months)

Leading SOC projects and managing ISMS/PIMS engagements, driving GDPR, HIPAA, and PCI DSS compliance initiatives and preparing attestation and audit reports. Mentored teams and conducted client training to improve compliance posture and project delivery.

ISMS PCI DSS GDPR HIPAA Risk Assessment

Associate Consultant, GRC

SISA Information Security Pvt Ltd

Dec 2021 - Apr 2024 (2 years 4 months)

Executed SOC, ISO, PCI DSS, GDPR, HIPAA and SEBI audits, managed ISMS/PIMS projects and prepared SOAs and policies to support compliance reporting and control assessments. Conducted client trainings and collaborated on risk assessments and mitigation strategies.