Verified
This profile is verified using an email address.
GNANADEV KATHARE
Bengaluru
Summary
Results-driven Governance, Risk, and Compliance (GRC) professional with over 4 years of expertise in information security governance, regulatory compliance, and risk management within SaaS environments. Skilled in implementing Information Security Management Systems (ISMS) and Privacy Information Management Systems (PIMS) aligned with ISO 27001:2022 and other key frameworks. Experienced in conducting risk assessments, leading audits, and managing third-party risk, enhancing compliance and audit readiness.
Overview
1
1
Certification
10
10
years of professional experience
Work History
Associate Compliance Manager
ExamRoom.AI
Bengaluru, Karnataka
08.2024 - Current
- Manage compliance programs aligned with ISO 27001:2022, ISO 27701 (PIMS), SOC 2 Type II, GDPR, and PCI DSS.
- Represented management in certification audits and regulatory compliance reviews, ensuring alignment with organizational standards.
- Lead Governance, Risk, and Compliance (GRC) initiatives supporting information security, privacy governance, and regulatory compliance across the organization.
- Led third-party risk management, conducting vendor security assessments and performing compliance due diligence to mitigate risks.
- Support RFP responses and customer security questionnaires related to security and privacy compliance.
- Perform Data Protection Impact Assessments (DPIA) and privacy risk assessments aligned with GDPR principles including data minimization and consent management.
- Integrate security and compliance controls within SDLC processes using JIRA and collaborate with engineering teams.
- Established Information Security Policies and governance processes
- Aligned security frameworks and compliance controls with organizational objectives
- Maintained ISMS risk registers and conducted information security risk assessments, updating Statement of Applicability (SoA) to reflect current risk posture.
- Conducted asset inventory, risk identification, and vulnerability assessments
- Developed Risk Treatment Plans and mitigation strategies
- Implemented Business Continuity Planning (BCP) and resilience controls
- Executed Cyber Crisis Management exercises
- Implemented data classification and data ownership programs
- Ensured legal, regulatory, and cybersecurity compliance
- Performed internal audit and compliance roles to ensure regulatory adherence.
- Conducted independent internal audits
- Successfully led Credentia (ExamRoom.AI group company) through first-time ISO 27001 certification with zero non-conformities (2025).
- Served as Single Point of Contact (SPOC) for ISO, SOC 2, GDPR, and PCI DSS compliance audits.
Senior Digital Marketing Specialist
ExamRoom.AI
bangalore, Karnataka
01.2022 - 09.2024
- Transitioned Governance, Risk, and Compliance operations to support ISO and privacy compliance programs, enhancing organizational adherence.
- Managed policy documentation lifecycle, including SOPs and compliance evidence repositories, ensuring regulatory alignment.
- Reviewed vendor contracts and SLAs for compliance and data protection requirements.
- Supported remediation of Vulnerability Assessment and Penetration Testing (VAPT) findings while monitoring compliance KPIs to maintain security standards.
Digital Marketing Executive
GSS Webtech Mysore
Mysore, Karnataka
12.2020 - 09.2021
Digital Marketing Executive
Techpearl Software Pvt Ltd
Bangalore, Karnataka
09.2019 - 12.2020
- Collected and analyzed Web metrics such as visits, time on site and page views per visit.
- Created customized marketing materials to increase product awareness.
- Created solution-based execution plans to achieve business goals based on Google Analytics and internal reporting data.
- Planned and executed web, SEO, database marketing and social media advertising campaigns.
Digital Marketing Executive
The Realm
Bangalore, Karnataka
12.2018 - 04.2019
- Directed traffic growth strategies, SEO, content distribution, email marketing, and trackbacks.
- Supported new client acquisition with superior strategy and world-class presentations.
- Helped clients develop website portals and social media pages to promote businesses.
- Optimized website content and images to improve search engine rankings.
SEO Executive
Infonyasa Technologies
Bangalore, Karnataka
11.2016 - 11.2018
- Developed and deployed content marketing strategies to improve organic search traffic.
- Optimized website content and images to improve search engine rankings.
- Managed search engine marketing budgets and tracked campaign performance.
- Devised effective link-building campaigns to increase website authority and visibility.
Education
Bachelor of Engineering - Electronics & Communication
SJMIT
Chitradurga01-2011
Diploma - Electronics & Communication
Government Polytechnic
Belagavi01-2007
Skills
- Compliance Program Management
- Governance, Risk and Compliance (GRC)
- Regulatory Compliance
- ISO 27001:2022
- ISO 27701 (PIMS)
- SOC 2 Type II
- GDPR Compliance
- PCI DSS
- Information Security Governance
- Enterprise Risk Management (ERM)
- Risk Assessment
- Vendor Risk Management
- Third-party assessments
- Audit Readiness
- Security Due Diligence
- Security Questionnaires
- Contract Compliance Reviews
- Risk Register Management
- Secure SDLC Governance
- Privacy governance
- Security management system
Certification
- ISMS Lead Implementer & Auditor
- Certified Executive CISO by Government of India
- PCI DSS Awareness
- GDPR Awareness
- CISSP Bootcamp (3-Day Training by Hemant Sajwan)
Languages
- English, Fluent
- Hindi, Professional
- Kannada, Native
- Tamil, Conversational
- Marathi, Conversational
Timeline
Associate Compliance Manager
ExamRoom.AI
08.2024 - Current
Senior Digital Marketing Specialist
ExamRoom.AI
01.2022 - 09.2024
Digital Marketing Executive
GSS Webtech Mysore
12.2020 - 09.2021
Digital Marketing Executive
Techpearl Software Pvt Ltd
09.2019 - 12.2020
Digital Marketing Executive
The Realm
12.2018 - 04.2019
SEO Executive
Infonyasa Technologies
11.2016 - 11.2018
Bachelor of Engineering - Electronics & Communication
SJMIT
Diploma - Electronics & Communication
Government Polytechnic