YD 

Background

Experience & Education 

Roles, research, and rigor — the path so far... 

Timeline

Key Achievements

  1. AUG 2024 — MAY 2026

    Lead Researcher

    Indiana University Bloomington

    • Co-authored a law review article examining the medical device cybersecurity governance gaps in the U.S., with a particular emphasis on the evolving role of AI; the piece has been approved for publication and is forthcoming in the Minnesota Journal of Law, Science, and Technology
    • Conducted AI impact assessment using ISO 42005
    • Applied CSA's MAESTRO framework to identify threats, vulnerabilities, risks, and mitigations across the seven-layer reference architecture for an agentic AI use case

  2. JUNE — JULY 2025

    SOC Intern

    OmniSOC, Indiana University Bloomington

    • Established visibility and detection capability for IU's AWS environment by analyzing the TTPs of the five most prevalent adversaries and delivering optimized logging recommendations with a detection rulebook mapped to the MITRE ATT&CK and DeTT&CT frameworks

  3. MAY 2025 — DEC 2025

    Research Intern

    Advanced Cyber Law 

    • Enabled meaningful podcast discussions by developing structured podcast scripts that framed questions targeting core challenges in emerging cybersecurity issues like agentic AI identity risks, hacking back the hackers, and incident response under cybersecurity decentralization in the U.S. 

  4. JAN 2023 — AUG 2024

    Associate

    PwC, Advisory - Risk Consulting Practice - Strategy & Governance Capability

    • Mitigated systemic risks and reduced internal audit findings by over 60% by addressing control gaps through developing business-aligned and regulatory-compliant 15 topic-specific security policies, KPIs, and KRIs
    • Cut the vulnerability exposure window by over 50% by designing and operationalizing secure coding, vulnerability and change management standards
    • Elevated AWS cloud security posture by identifying 70+ issues during a cloud security assessment; delivered risk-based remediation recommendations
    • Led enterprise-wide ISO 27001:2022 implementation for a cloud native client from the ground up, achieving certification within 3 months
    • Optimized the vendor security program (600+ vendors), improving assessment rigor and accelerating assessment completion timelines by 30%
    • Tracked and collected evidence for ongoing SOC 2 and ISO 27001 audits, responding directly to vendor security questionnaires, coordinating and vetting evidence with control owners, resolving auditor queries, and driving findings to closure
    • Developed a continuous compliance framework (CCF) that tracked 300+ controls spanning multiple frameworks (ISO 27002, NIST 800-53, PCI-DSS)
    • Conducted risk assessment across 8 business functions; identified, documented, and reported vulnerabilities and control gaps, and operationalized a centralized enterprise risk register

  5. NOV 2021 — JAN 2023

    Compliance Associate

    Capgemini, Global Risk & Compliance Function

    • Achieved successful compliance by independently managing an Integrated Management System covering ISO 27001/27701/22301, and SOC 2 Type 2
    • Established audit-ready compliance with stringent regulatory frameworks, including GDPR, HIPAA, and CCPA by developing ROPAs and conducting privacy impact assessments (PIAs) across 16 regional and 6 global engagements spanning India, China, Europe, and the US
    • Improved the information security posture across 22 engagements by conducting asset-based risk assessment and managing risks end-to-end from identification to mitigation, reporting, and monitoring
    • Developed end-to-end Business Continuity Plans for 22 engagements; earned 'Rising Star' award for sustained quality delivery
    • Coordinated and delivered security awareness training programs across a 5,000+ employee business unit, reducing phishing click rate by ~30%

Education

Where curiosity met credentials

  1. AUG 2024 — MAY 2026

    M.S., Cybersecurity Risk Management

    Indiana University Bloomington

    Interdisciplinary graduate coursework across three schools of Indiana University: Maurer School of Law, Kelley School of Business, and Luddy School of Informatics.

    Coursework

    • Cybersecurity Law and Policy
    • Information Privacy Law 
    • AI: Law and Technology
    • Technical Foundations of Cybersecurity
    • Security for Networked Systems
    • Cloud Computing
    • Cyber Risk Management Capstone
    • Cyber Clinic
    • Information Technology Principles

  2. AUG 2020 — APRIL 2021

    Advanced Certificate, Computer Security

    Stanford University

    Online Certificate Program by Stanford Center for Professional Development designed for industry professionals to hone their skills in Computer Security.

    Coursework

    • Foundations of Information Security
    • Exploiting and Protecting Web Applications
    • Using Cryptography Correctly
    • Network Security
    • Emerging Threats and Defenses
    • Software Security

  3. AUG 2015 — MAY 2019

    B.Tech, Mechanical and Automation Engineering

    GGSIP University

    Foundation in engineering mechanics.