Ashmit Adatiya

• Spearhead end to end ownership of information security regulatory compliance and audit management for RBI, SEBI, and other
regulatory bodies.
• Serve as primary regulator-facing lead during cybersecurity and IT inspections and quarterly sustenance checks — presenting
controls implemented across key risk areas and articulating root cause, remediation, and recurrence-prevention measures for
audit observations.
• Manage control testing and evidence validation for audit observations across SOC, DLP, Vulnerability Management, Third Party
Risk Management functions, deepening expertise in translating regulatory requirements into implementable controls and
regulatory-risk analysis.
• Present compliance posture, key risks, and remediation progress to senior management and the Information Security/Risk
Committee, owning end-to-end preparation of quarterly governance committee decks and meeting minutes.
• Own quarterly regulatory filings to RBI, coordinating preparation, analysis, and validation of 40+ regulatory returns covering
cybersecurity, business information, and attempted-fraud incidents, covering 16+ reporting cycles.
• Led onboarding of an AI-enabled GRC platform — defining business requirements, running functional testing, and implementing
business-driven configuration changes — to modernize governance reporting.
• Governed 250+ KRIs across information security domains, strengthening risk visibility for senior stakeholders.
• Mentor and delegate tasks to freshers/new joinees on regulatory tracking, evidence management, and reporting, freeing capacity
for strategic governance, committee engagement, and senior stakeholder management.

• Began GRC career conducting information security gap assessments and policy mapping against ISO 27001, NIST CSF, and SOC 2
frameworks, building the compliance foundation for regulator audit readiness.
• Acted as a single point of contact for internal and external audits, coordinating evidence collection that drove closure of 500+
audit observations within regulatory timelines, raising compliance posture from 58% to 85%.
• Monitored and tracked regulatory reports, alerts, and advisories from RBI, SEBI, and NCIIPC to drive timely compliance action;
selected by leadership to co-lead direct regulator engagement during quarterly inspections and sustenance checks based on
demonstrated ownership.
• Streamlined and automated regulatory-observation tracking using Power Query and Excel Automate as observation volumes
scaled, cutting manual effort and improving governance reporting efficiency by ~70%.
• Coordinated Risk & Control Self-Assessments (RCSA) across multiple domains within Information Security
• Validated and reconciled large datasets across Excel and ServiceNow ahead of regulatory filings, ensuring data integrity and zero
reporting discrepancies.