GRC & Cloud Security Engineer (Capstone Project) — ICDFA (Remote)
Developed and deployed an AWS integrated GRC platform as a capstone project, focusing on automated compliance monitoring concepts and security controls rather than manual annotation. Used AWS services to operationalize governance, risk, and compliance checks through alerting pipelines and reporting workflows. Applied ISO 27001, NIST, GDPR, and PCI DSS frameworks to run compliance assessments through case studies. • Built AWS resources using CloudFormation, Lambda, and RDS (MySQL) for platform deployment • Configured compliance monitoring and alerting pipelines using CloudTrail, EventBridge, and CloudWatch • Performed risk analysis and compliance assessments via structured case studies • Authored security policies and reports aligned to regulatory requirements