ABHIJAI KHANNA
Associate GRC Consultant
Noida,UP
Summary
Diligent consultant with specialization in Governance, Risk, and Compliance. Extensive experience in implementing risk management frameworks and compliance strategies for various organizations. Demonstrated ability to analyze regulatory requirements and develop comprehensive policies that ensure adherence and mitigate risks.
Overview
1
1
year of professional experience
2
2
Certifications
3
3
Languages
Work History
Associate GRC Consultant
Kratikal
11.2024 - 11.2025
- ISO 27001:2022 ISMS Audits and SOC 2 Readiness Assessments: Wrote Policies for 23 end-to-end ISO 27001:2022 ISMS audits and SOC 2 readiness assessments for fintech, IT, and healthcare clients, resulting in a reduction of major nonconformities by 10% year-over-year.
- IT Risk Assessments and Statements of Applicability Development: Conducted IT risk assessments and developed Statements of Applicability (SoA), improving business-aligned controls, and reducing audit observations by 15%.
- Evidence Collection and Validation: Managed evidence collection and validation using GRC platforms, improving audit turnaround time by 20%, while consistently meeting client deadlines.
- Control Design Reviews and Vulnerability Remediation: Performed control design reviews, access management, and vulnerability remediation for AWS IAM, S3, and MFA; contributed to resolving 95% of identified issues before external audits.
- Audit and Compliance Reporting: Prepared and presented detailed internal audit and compliance reports, supporting corrective actions that drove the closure of 90% of findings within 30 days.
GRC Intern
K&S Digiprotect
08.2024 - 11.2024
- ISO 27001 Implementation: Assisted with ISO 27001 implementation for a FinTech SaaS client, performing policy drafting, gap assessments, and audit preparation that cut initial findings by 12%.
- Compliance Documentation and Corrective Actions: Supported compliance documentation and corrective action tracking, helping achieve a 100% closure rate on risk register items, and increasing compliance audit readiness by 18%.
Education
B.Tech - Computers and Communication Engineering
Manipal University Jaipur
01.2024
Skills
ISMS
GRC
ISO 27001
IT Audit
SOC 2
AWS
Cloud Audit
IT Security
Risk
Compliance
Policy Drafting
Consulting
Gap assessments
Internal auditing
ISO standards
Compliance monitoring
Data privacy
Control testing
Information security
IT governance
Risk mitigation
Cybersecurity best practices
Vendor risk management
Training and awareness
Third-party assessments
Problem-solving
Internal controls
Risk assessment
Certification
Comptia Security +
Interests
Solo Traveling, Music, Poetry
Timeline
Associate GRC Consultant
Kratikal
11.2024 - 11.2025
GRC Intern
K&S Digiprotect
08.2024 - 11.2024
B.Tech - Computers and Communication Engineering
Manipal University Jaipur