I am an IT security and compliance audit professional with hands-on experience across ISO 27001, ISO 27701, SOC 1 & SOC 2, and DPDP requirements. My skillset includes risk assessment, control design and effectiveness testing, ITGC reviews, access and asset management audits, evidence collection, remediation tracking, and audit reporting. I’m comfortable bridging both the technical side (security controls, systems, logs, cloud basics) and the policy/compliance side (standards, documentation, governance), which allows me to deliver audits that are practical, clear, and actionable for businesses.