Suman G.

About Suman G.

Possessing a fervent passion for Cybersecurity and decentralized technologies, a solid foundation has been established through active engagement in CTFs, research publications, and portfolio-related activities. The focus centers on evaluating security controls and assessing organizational resilience, particularly where Blockchain and Artificial Intelligence intersect with enterprise environments. With comprehensive experience in Governance, Risk, and Compliance (GRC) frameworks and Blue Teaming operations, problem-solving is approached through systematic analysis—identifying control gaps, measuring threat exposure, and validating remediation effectiveness. This methodology extends to troubleshooting IT-related issues in everyday contexts, where root cause analysis and documented evidence gathering become second nature.Foundationally strong in several scripting languages and GitHub, these technical capabilities support rigorous testing methodologies and the automation of control verification processes. Known for meticulous attention to detail and precision in documentation, every engagement follows a collaborative approach that balances technical depth with stakeholder communication.Aspiring to deepen expertise in assessing security postures and examining organizational controls, the objective is to identify vulnerabilities across people, processes, and technology—both before incidents materialize and throughout their lifecycle. Maintaining steadfast dedication to continual professional development, ensuring that analytical frameworks and technical comprehension evolve alongside emerging threat landscapes and regulatory requirements.

Experience

1. Tech Risk Analyst 1 Assurance Gds India

   EY

   Jun 2025 — Present · Kolkata, IN

   Audited major firms with a focus on logical security assessments, information security risk evaluations, and comprehensive ITGC testing across enterprise environments- Executed IT General Controls (ITGC) audits encompassing User Access Reviews (UAR), and ITIL-aligned processes including Managed Access, Managed Change, and Managed Operations frameworks- Conducted CSAE & 3416, ISAE & 3402 attestation engagements with controls mapped to ISO 27001 requirements and SOC 2 compliance standards- Evaluated control environments through GL forms 232 and 310 assessments, examining financial reporting controls and IT-dependent manual controls- Collaborated with control owners to enhance control design effectiveness, remediate identified deficiencies, and improve overall operational maturity.

Education

• KIIT School of Computer Applications

  Master of Science - MSc, Computer Science

• Hem Sheela Model School - India

  All India Senior School Certificate Examination, Business/Commerce, General

• Encode Club

  Bootcamp Participant, Blockchain

• Jain (Deemed-to-be University)

  Bachelor of Computer Applications, Mobile Application & Internet Security