Bhavin Mehta

About Bhavin Mehta

Seasoned Information Security and GRC (Governance, Risk, and Compliance) professional…

Experience

1. Senior Security Consultant Risk and Compliance Ibm

   IBM

   Feb 2022 — Present · Pune, IN

   Governance & Frameworkso Develop and implement governance, risk, and compliance (GRC) frameworks, policies, and procedures.o Align risk management practices with business objectives and regulatory requirements.2. Risk Managemento Lead Risk Control Self-Assessments (RCSA) and enterprise risk assessments.o Identify, evaluate, and monitor operational, IT, financial, and compliance risks.o Maintain risk registers and prepare risk dashboards for management reporting.3. Compliance Managemento Ensure compliance with regulatory standards (SOX, ISO 27001, NIST RMF, and NIST CSF).o Coordinate internal audits and facilitate inspections.o Monitor changes in laws, regulations, and standards affecting the organization.4. Control & Assuranceo Evaluate design and effectiveness of internal controls.o Manage control testing, issue remediation, and continuous monitoring programs.5. Policy & Process Oversighto Develop, review, enforce security, compliance, and risk management policies.o Drive process improvement initiatives to strengthen control environment.6. Stakeholder Engagemento Collaborate with senior management, auditors, and regulators to address risk/compliance matters.o Provide training and awareness programs on risk and compliance practices.7. GRC Tools & Reportingo Administer GRC platforms (Archer, ServiceNow GRC, and Prevalent).o Develop executive-level dashboards and risk/compliance reports for board and committees.8. TPRM (Third-Party Risk Management)o Oversee third-party risk management program including vendor due diligence, on boarding, and ongoing monitoring. Ensure compliance with regulatory requirements and internal policies across the vendor lifecycle. Conduct risk assessments, contract reviews, and issue remediation for high-risk vendors. Provide reporting and insights to senior management on third-party risk posture

Education

• Shivaji University

   Diploma in Business Management, Business Administration and Management, General

  1998 — 2001

• Savitribai Phule Pune University

  Master's of Commerce, Business Administration and Management, General

  2002 — 2005