Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic
Viswajith Puranthar

Viswajith Puranthar

Bangalore

Summary

Consultant at Grant Thornton Bharat with extensive experience in cyber maturity assessments, RBI audits, Third-Party risk assessments and Data Privacy. Proven track record of enhancing organizational security frameworks and mitigating risks through thorough analysis and strategic recommendations.

Overview

2
2
years of professional experience
1
1
Certification

Work History

Executive(Consultant)

Grant Thornton Bharat
Bangalore
04.2024 - Current
  • As a risk consultant for the GT Cyber IT Risk Team, I conducted cyber maturity assessments using the NIST Cybersecurity Framework (CSF), assessing the client's cybersecurity capabilities across multiple domains and subdomains, such as Asset Management, Identity Management, Threat Detection, and Incident Response. Interviewed stakeholders and reviewed documents to analyze gaps in policies, processes, and technical controls. Created a strategic three-year roadmap outlining specific activities to improve the client's cybersecurity maturity.
  • Conducted Third-Party Risk Management (TPRM) assessment using ISO 27001 standard. This included assessing the client's third-party vendors' security processes using risk assessments, security audits, and compliance checks. Drafted reports highlighting vulnerabilities, data handling risks, and compliance gaps, as well as recommendations for improving vendor management processes.
  • Led and conducted a comprehensive RBI tokenization audit for a major financial client, assessing compliance, security protocols, and data integrity, while providing actionable recommendations for process improvements and risk mitigation.
  • Led a cross-functional team in conducting data privacy assessments across eight country regions for a major FMCG client, delivering comprehensive reports with regulatory observations mapped to each region’s applicable data protection laws, and generating a data flow diagram for each in-scope department.
  • Conducted control testing aligned with client-specific risk and control objectives, assessing design and operational effectiveness to ensure compliance with internal policies and regulatory frameworks.
  • Conducted internal audits in alignment with ISO 27001:2022 requirements, and delivered detailed gap assessment reports outlining non-conformities, improvement areas, and actionable remediation recommendations.

Intern

Open Security Alliance
Mumbai
04.2023 - 06.2023
  • Reviewed ISMS policies of multiple clients with respect to ISO 27001:2022 standard
  • Created policies based on NIST CSF including Data Loss Prevention standard, BYOD standard.
  • Developed a training module for Information Security for an external client. A syllabus on Information Security was designed, and training modules were implemented based on it.
  • Acted as a project manager in development of workflows for audit automation software. Took meetings with developer to give requirements regarding the same.

Education

MBA - Information Technology Business Management

Symbiosis Centre For Information Technology
Pune

Bachelor of Technology - Information Technology

Rajagiri School Of Engineering And Technology
Ernakulam

Skills

  • ISO 27001:2022
  • ISMS
  • TPRM
  • NIST CSF
  • Risk Management
  • ITGC
  • Maturity assessment
  • Data Privacy

Certification

  • CQI-IRCA Certified ISO 27001:2022 ISMS Lead Auditor 2023.

Timeline

Executive(Consultant)

Grant Thornton Bharat
04.2024 - Current

Intern

Open Security Alliance
04.2023 - 06.2023

MBA - Information Technology Business Management

Symbiosis Centre For Information Technology

Bachelor of Technology - Information Technology

Rajagiri School Of Engineering And Technology
Viswajith Puranthar