srishti singh

I’m a GRC Analyst with hands-on experience implementing ISO 27001, executing internal audits, and performing risk & control assessments across data center and startup environments. I focus on strengthening control effectiveness through structured risk and control mapping.

In my current role, I lead end-to-end internal audits across business processes and data center environments, identifying control gaps and improving control effectiveness by 25–30%. I also support third-party/vendor risk assessments, aligning security controls to compliance expectations for critical vendors, with exposure to control testing methodologies comparable to SOX.

I’m especially effective at translating audit findings into practical improvements. I’ve built compliance automation solutions, including MFA-enabled authentication workflows and a User Access Management tool, reducing manual audit effort by 30–40% while streamlining compliance monitoring using AI-driven approaches, and I deliver ISMS awareness training to strengthen organizational security culture.