NAWANEET G.
San Francisco Bay Area, CA · Application Security and GRC Program Consultant (Part-time) · Fenderr Freight (Logistics)
National Institute of Engineering, Mysore, India
15 followers
About
NAWANEET G. is a cybersecurity governance, risk, and control assurance leader with over 12 years of experience building and scaling security, privacy, and enterprise risk management programs. He has proven expertise in leading various compliance frameworks and is skilled in partnering with diverse teams to establish scalable governance frameworks and continuous security assurance processes. Nawaneet is an ISO 27001 Lead Auditor, ISO/IEC 42001 Lead Implementer, and Lean Six Sigma Black Belt with expertise in AI-assisted operational control automation, risk analytics, and continuous improvement.
Specialties
- Governance & Compliance
- ISO 27001
- Risk Management
- Security Auditing
- Security Program Management
Skills
- SOC Operations
- Vulnerability Management
- Incident Response
- Threat Management
- IAM
- Zero Trust
- SSDLC/CI-CD
- Cloud Security (AWS, Azure)
- BCP/DR
- CrowdStrike
79 skills in total
Licenses & Certifications
-
Project Management
PELCON
Issued Jun 2026
-
DORA
Global Learning Sapiens University
Issued Jun 2026
-
Lean Six Sigma Master Black Belt
Lean Six Sigma Board
Issued Jun 2026
6 certifications in total
Experience
-
Application Security and GRC Program - Part time Consultant
Fenderr Freight (Logistics)
Feb 2026 — Present
San Francisco Bay Area, CA
-
Application Security and GRC Program - Part time Consultant
Fenderr Freight
Feb 2026 — Present
San Francisco Bay Area, CA
-
Sr Methodology & Compliance Manager
SAPIENS Technology (Insurance Product Development)
Jun 2019 — Dec 2025
6 experiences in total
Education
-
National Institute of Engineering, Mysore, India
Bachelor of Engineering, Industrial Production
Not Specified
Recent posts
Turning cybersecurity KPIs into predictive intelligence—so organizations can anticipate risk before it becomes an incident.
KPIs tell a story about last quarter. Predictive models tell you about next quarter.
[celebration:new_certification]Has successfully verified **Project Management** (PELCON)
AI System Lifecycle with ISO42001 Controls - Governed Development Pipeline with retraining and incident feedback loops
1. Most AI governance frameworks are drawn as a straight line. Reality is a loop, and the loop is where the risk lives.
2. The lifecycle doesn't end at deployment. That's usually where the real governance work begins.
3. A model that never gets retrained isn't stable — it's just undetected drift waiting to happen.
I shared this on LinkedIn and wanted to share it with the Cyber community as well.
Enhance Enterprise Risk Management using the FMEA & FIAR approach
The Governance metrics most security leaders are missing: Cost of Quality in ISO27001 and SOC 2 Framework