08/22/2026 updated
100 % available
GRC Consultant & PCI Associate Qualified Security Assessor (AQSA) | PCI DSS | SOC 2 | ISO 27001
Bengaluru, India
Only remote
B.Tech, Computer EngineeringAbout me
I help startups & fintechs navigate security frameworks and pass audits without slowing engineering velocity. Specializing in end-to-end compliance, I take teams from gap analysis to audit readiness, embedding sustainable security practices that unblock enterprise sales.
ISO 27001SOC 2ComplianceGovernance Risk Management and ComplianceInformation AssuranceNetwork SecurityPCI Data Security StandardsQualified Security AssessorSecurity AuditsScriptingDigital Compliance
PCI DSS Compliance Assessment
End-to-end PCI DSS compliance assessments spanning SAQ and Level 1 engagements, including scoping, gap analysis, evidence review, and remediation guidance as an Associate QSA.
GRC Frameworks (SOC 2, ISO 27001, ISO 27701, RBI SAR)
Delivery of compliance assessments across SOC 2, ISO 27001, ISO 27701, and RBI SAR frameworks for organizations in e-commerce, retail, and finance sectors.
Security Tooling & Automation
Development and deployment of automated compliance tools, including a Windows Security Audit Tool and a cross-platform PAN Scanner, used in active production environments to validate IT controls and detect cardholder data exposure.
Vulnerability Assessment & Ethical Hacking
Conducting security assessments and vulnerability scans using ethical hacking techniques to identify and address system weaknesses.
Active Directory & System Administration
Management of Active Directory user accounts, groups, and permissions in adherence with strict security policies, along with Tier 1/2 technical support and monthly patching of Windows Server and Ubuntu systems.
Python & C/C++ Programming
Programming in Python, C/C++, and Java for developing security tools, automation scripts, and compliance solutions.
Network Security & Threat Intelligence
Knowledge and application of network security principles, threat intelligence, IAM, digital forensics, and application security in cybersecurity engagements.
CI/CD Pipeline & Cross-Platform Development
Automated cross-compilation for Windows, macOS, and Linux releases using a GitHub Actions CI/CD pipeline for security tooling deployment.
CIM/WMI System Querying
Querying system data via CIM/WMI with precise filtering to audit Windows system security and configuration against multiple compliance standards.
End-to-end PCI DSS compliance assessments spanning SAQ and Level 1 engagements, including scoping, gap analysis, evidence review, and remediation guidance as an Associate QSA.
GRC Frameworks (SOC 2, ISO 27001, ISO 27701, RBI SAR)
Delivery of compliance assessments across SOC 2, ISO 27001, ISO 27701, and RBI SAR frameworks for organizations in e-commerce, retail, and finance sectors.
Security Tooling & Automation
Development and deployment of automated compliance tools, including a Windows Security Audit Tool and a cross-platform PAN Scanner, used in active production environments to validate IT controls and detect cardholder data exposure.
Vulnerability Assessment & Ethical Hacking
Conducting security assessments and vulnerability scans using ethical hacking techniques to identify and address system weaknesses.
Active Directory & System Administration
Management of Active Directory user accounts, groups, and permissions in adherence with strict security policies, along with Tier 1/2 technical support and monthly patching of Windows Server and Ubuntu systems.
Python & C/C++ Programming
Programming in Python, C/C++, and Java for developing security tools, automation scripts, and compliance solutions.
Network Security & Threat Intelligence
Knowledge and application of network security principles, threat intelligence, IAM, digital forensics, and application security in cybersecurity engagements.
CI/CD Pipeline & Cross-Platform Development
Automated cross-compilation for Windows, macOS, and Linux releases using a GitHub Actions CI/CD pipeline for security tooling deployment.
CIM/WMI System Querying
Querying system data via CIM/WMI with precise filtering to audit Windows system security and configuration against multiple compliance standards.
Experience
Professional experience0 - 5 years
Freelancer since2026
Languages
EnglishFluentHindiNative speaker
Project history
Led end-to-end PCI DSS compliance assessments spanning SAQ and Level 1 engagements, owning scoping, gap analysis, evidence review, and remediation guidance as an Associate QSA. Delivered compliance assessments across SOC 2, ISO 27001, ISO 27701, and RBI SAR frameworks. Built and deployed a Windows Security Audit Tool and a cross-platform PAN Scanner to automate IT control validation and detect exposed cardholder data.
Engineered a multi-threaded, cross-platform PAN scanner with auto OS-detection and Luhn algorithm validation to scan hundreds of heterogeneous workstations with minimal false positives. Automated cross-compilation for Windows, macOS, and Linux releases using a GitHub Actions CI/CD pipeline.
Developed an automated tool to audit Windows system security and configuration against multiple compliance standards, querying system data via CIM/WMI with precise filtering for actionable, targeted results. Engineered multi-point checks reporting the active status of critical security agents, including antivirus, FIM, and patch management.