GRC / IT Audit professional focused on ISO 27001:2022, ITGC, vendor due diligence, compliance reviews and VAPT.
Hands-on experience across internal audits, control testing, evidence review, risk assessment, reporting and remediation tracking. Experience also includes web and network VAPT with OWASP Top 10-based testing.
ITGC engagements across key IT processes, including planning, walkthroughs, control testing and reporting.
Web and network security assessments with findings, remediation recommendations and closure support.
Risk assessment, evidence collection, documentation, findings, RCA, remediation tracking and retesting.
End-to-end audit activities, ISO 27001 / ISO 31000 / ISO 42001 / NIST / SOC 1 & SOC 2 assessments, ServiceNow and LEAP evidence/control testing, CrowdStrike review, workpapers, risk registers and final audit reporting.
Performed VAPT for web applications and network environments, OWASP Top 10-based assessments, vulnerability identification, remediation reporting and security validation using Burp Suite, Nessus and Kali Linux.
Exposure to cybersecurity threats, attack techniques, phishing, malware, social engineering, network vulnerabilities and basic incident handling.
MCA — Amity University, Noida
BA — Government College, Suratgarh
Senior Secondary — Mathematics
CEH — EC-Council
ISO/IEC 27001 Lead Auditor — CQI IRCA
One year Diploma in Cyber Security
DPDPA 2023
ServiceNow · CrowdStrike · RSA Archer · NNMi · NetWitness · LEAP · Burp Suite · Nessus · Kali Linux
Open to conversations around GRC, IT Audit, ISO 27001 and cybersecurity opportunities.
mukeshpareek0009@gmail.com