Mohamed Rafi
Cybersecurity Governance, Risk & Compliance (GRC) Professional | Empowering Businesses with Secure Solutions
- Role
- Grc Specialist at Zensar Technologies
- Location
- Chennai, TN, IN
- LinkedIn followers
- 500 followers
About Mohamed Rafi
I am passionate about building organizations cybersecurity posture, mitigate risk, and…
Experience
Grc Specialist
Mar 2024 — Present · Chennai, IN
Develop, implement, and maintain the enterprise Governance, Risk, and Compliance (GRC) framework, aligning it with industry standards (NIST, ISO 27001) and business objectives.Manage the annual compliance calendar, scheduling and overseeing internal audits, control tests, and management reviews to ensure continuous readiness for external assessments.Chair quarterly risk review meetings with IT and business stakeholders to present findings, track remediation progress, and align on risk appetite and treatment strategies.Conduct ongoing IT risk assessments to identify, evaluate, and document technology risks related to new projects, system changes, and third-party integrations.Manage the issue and exception management process, tracking control deficiencies and policy exceptions through to remediation with clear ownership and deadlines.Maintain the corporate risk register in the Archer platform, ensuring all risks are accurately documented with updated scores, action plans, and mitigation status.Analyze vendor security posture, identify control gaps, and work with procurement and business owners to negotiate risk remediation clauses in contracts.Conduct periodic re-assessments of critical vendors to ensure ongoing compliance with security requirements.Develop, update, and socialize IT security policies, standards, and procedures to reflect evolving regulatory requirements and the threat landscape.Serve as the primary point of contact for internal and external audits (e.g, ISO 27001, SOC 2), coordinating evidence collection, managing auditor requests, and facilitating stakeholder interviews.Test the design and operating effectiveness of key IT controls to verify compliance with internal policies and external regulatory mandates.Develop and generate monthly GRC metrics and dashboards for senior management, providing a clear view of the organization\'s risk posture, compliance status, and audit findings.
Education
Magdalena High School
Bachelor of Engineering - BE, Computer Science
Find verified contacts for anyone on LinkedIn
Unifers gives sales teams verified emails and direct dials, enriched profiles, and outreach that lands in the inbox.
Free plan included · No credit card required
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.