Kartavya Parashar

(Working as a GRC Consultant for Paytm through Info eShield - Cyber Solutions.)

• Supported implementation and operationalization of the SEBI Cyber Security and Cyber Resilience Framework (CSCRF).
• Performed SEBI Cyber and System Audits, including control testing, evidence validation, and audit support.
• Acted as an auditee for ITAC and ITAC audits, coordinating responses and remediation with stakeholders.
• Supported DPDP Act–aligned Data Privacy audits assisting in control assessment, evidence validation, stakeholder coordination, and remediation tracking for identified privacy compliance gaps.
• Developed and implemented CSCRF-aligned policies and procedures across security and IT domains.
• Conducted compliance gap assessments and supported closure of identified regulatory and audit gaps.
• Executed quarterly Patch Management, Privileged Access Management (PAM), and Asset Management reviews.
• Collaborated with IT, Security, and DevOps teams to strengthen governance and audit readiness.

Company Overview: (CERT-in) empanelled organization.

• Led 50+ audits for ISO 27001, SOC 2 including SEBI Cyber, System and Cloud Audits.
• Assisted in Third Party Risk assessments and GDPR audits.
• Conducted Vulnerable Assessment and Penetration Testing (VAPT), Source Code Audit activities and (GRC).
• Identified critical vulnerabilities and reported them to clients.