Yash Lalit Ghildiyal

Supporting ISO 27001:2022 readiness, ISMS governance, audit preparation, evidence management, and security control validation. Contributed to the redesign of the organization’s risk assessment methodology, supporting the transition from an Annex/control-based approach to a threat-based risk management framework. Performing cloud security risk assessments for AWS environments from an Information Security, ISMS, and governance perspective. Supporting CyberArk PAM governance, privileged access revi

Supported ISO 27001 surveillance audits, audit readiness activities, evidence collection, control validation, and remediation tracking. Supported PCI DSS compliance activities, including control reviews, documentation support, and audit evidence preparation. Reviewed and approved access requests for critical applications and GCP environments from an Information Security perspective, ensuring least-privilege access and compliance with security policies. Conducted GCP security governance reviews c

Supported enterprise security governance and infrastructure security operations across multinational client environments. Assisted with audit preparation, compliance support, access reviews, security control validation, and operational documentation. Collaborated with infrastructure, application, and compliance teams to support remediation activities and information security process improvements. Supported risk assessment and security review activities by gathering technical information, validat

Master's Thesis : RAG-Based Classification of Compliance Evidence to ISO 27001:2022 Controls with Human-in-the-Loop Validation Developing an AI-assisted compliance automation solution that leverages Retrieval-Augmented Generation (RAG) and Large Language Models (LLMs) to classify compliance evide

Final Year Project: Built a Machine Learning-based Web Crawler for automated web data extraction, classification, and analysis.