Ramya Nargana

GRC Analyst

Led end-to-end ISO/IEC 27001 implementation, including Statement of Applicability, internal audits, external audits, and certification readiness. Managed Third-Party Risk Management activities, supported SOC 1 and SOC 2 compliance, and responded to client security due-diligence questionnaires.

ISO 27001Internal AuditExternal AuditsThird Party Risk ManagementSOC 1SOC2NIST CSFPCI DSSGDPRBusiness ContinuityRisk AssessmentSecurity Awareness TrainingProcessUnityRSA ArcherJiraSharePointExcel

System Engineer Trainee

Infosys Ltd

Conducted internal audits in alignment with ISO/IEC 27001 standards and organizational security policies. Managed audit evidence collection, validation, and documentation, and supported internal and external audit programs.

ISO 27001Internal AuditExternal AuditsNIST CSFThird Party Risk ManagementIT General ControlsAccess ManagementIncident ManagementChange ManagementRisk AssessmentSecurity Awareness Training

Associate Professional Software Engineer

DXC Technology

Conducted internal audits and supported audit documentation in alignment with organizational policies and information security requirements. Collected, reviewed, and validated audit evidence and artifacts, and supported audit walkthroughs with control owners.

Internal AuditAudit documentationIT General ControlsAccess ManagementThird Party Risk ManagementremediationSecurity Awareness Training