Jothish N

About Jothish N

Results-driven cybersecurity professional with 4.5 years of combined experience in Governance, Risk & Compliance (GRC) and Security Operations Center (SOC) environments. Skilled in implementing and maintaining information security frameworks, performing risk assessments, managing compliance audits, and responding to security incidents.Proficient in risk management, control assessment, policy governance, and threat detection and response using SIEM tools. Adept at aligning security operations with business objectives and regulatory standards such as ISO 27001, NIST, SOC 2, and GDPR.Strong analytical mindset with hands-on experience in security monitoring, incident triage, vulnerability management, and audit support. Demonstrated ability to collaborate across IT, compliance, and business teams to strengthen organizational security posture and reduce risk exposure.

Experience

1. Grc Analyst

   Conduent

   Dec 2023 — Present · Bengaluru, IN

   Conduct comprehensive GRC assessments and gap analysis for ISO 27001, NIST, and GDPR compliance frameworks. Develop and implement risk management policies, procedures, and control libraries for client organizations. Facilitate internal audits and compliance reviews, producing detailed audit reports and remediation recommendations. Create and maintain risk registers, control assessments, and compliance documentation for regulatory requirements. Collaborate with cross-functional teams to ensure effective implementation of governance frameworks and risk mitigation strategies. Support client-facing deliverables including compliance roadmaps, policy documents, and executive risk reporting. Developed and maintained ISO 27001-compliant policies and procedures for risk management and security governance. Assisted in the design and implementation of ISO 27001-based security controls, ensuring continuous improvement in security operations. Gained foundational understanding of GDPR and PCI DSS requirements, focusing on privacy, data protection, and handling of sensitive information. Gained working knowledge of HIPAA privacy and security rules, particularly around handling sensitive healthcare information.

Education

• Annamalai University

  Master of Computer Applications - MCA, Computer/Information Technology Administration and Management

• APOLLO ARTS AND SCIENCE COLLEGE

  Bachelor of Computer Science, Computer Science