Browse categories
Explore
Fiverr Pro
English
$
USD
Medha D
@medha2
Cybersecurity GRC, ISO 27001, Risk and Compliance
Ireland
English, Hindi
About me
I am a Cybersecurity GRC professional with 4+ years of experience in ISO 27001, IT risk management, third-party risk management, security controls and compliance. As an ISO/IEC 27001 Lead Auditor certified professional, I help organizations identify gaps, assess risks, review controls and create practical remediation plans. My experience includes ISMS, SOC 2, TPRM, ITGC, audit readiness, evidence review and remediation tracking. I deliver clear, practical outputs that help businesses strengthen security, improve compliance and prepare for audits.
Skills
Medha D
Offline •
See my services
IT & Cybersecurity Certification
I will conduct an iso 27001 gap assessment and compliance review
Portfolio
Work experience
Security Software Engineer
IBM • Full-time
Jun 2025 - Jan 2026 • 7 mos
Served as a Security Software Engineer at IBM in Dublin. Responsible for contributing to security software development and engineering initiatives within the IBM Security division, focusing on building resilient software solutions and maintaining high standards of information security and governance.
Cyber Security Consultant
Zytal Info Pvt Ltd • Freelance
Sep 2024 - May 2025 • 8 mos
Delivered cybersecurity GRC and information security consulting across risk assessment, ISO 27001, control reviews and audit readiness. Conducted IT and cyber risk assessments, identified control gaps, evaluated control design and effectiveness, and supported remediation planning. Assisted with ISO 27001 ISMS activities, ITGC assessments, audit evidence reviews, CAPA tracking, risk registers and BCP/DR validation. Worked with stakeholders to translate security risks into practical, prioritized actions.
Information Security Analyst
Capgemini • Full-time
Sep 2021 - Aug 2023 • 1 yr 11 mos
Acted as an Information Security Analyst in the Pune Division. Specialized in IT Risk, Governance, Risk & Compliance (GRC), and Information Security. Supported ISO/IEC 27001 implementation, conducted risk assessments, and managed third-party risk management and IT general controls.
