Janita Madramootoo

Janita Madramootoo

Product Architect, Payments & Compliance

Melbourne, FL

About Me

My GRC experience comes from the engineering side rather than the audit side. For four years I was a Product Architect in payments, designing billing, authentication, and systems that had to live inside PCI-DSS constraints, where compliance was not a review at the end but a constraint on every design decision.

Working closely with our GRC team is what pulled me toward GRC engineering specifically. The part I like is the translation work: turning undocumented practices into controls a team can actually execute against. The engineering team is not being negligent on purpose, we just don't know better.

I hold the CGE-AUD and AWS Solutions Architect Associate certs. I am working through the CGE-P.

Before tech I coordinated commercial construction projects for six years, running 5-7 at a time across eight stakeholder groups. Different industry, same job: keeping a lot of moving parts aligned when the requirements are non-negotiable and everyone wants something different.

Experience Highlights

  • Co-designed a centralized billing gateway serving 12-15 internal consumers, and led pre-launch threat modeling with identified risks driven to remediation before release.
  • Wrote automation using Claude to review threat models for completeness and test code and AWS environments against PCI-DSS requirements and common vulnerability patterns.
  • Led technical discovery for secure financial document workflows, partnering with engineering, compliance, and customer success to balance user experience against PCI-DSS requirements.
  • Led design and delivery of a self-service KYC compliance platform enabling customers to meet regulatory requirements without interrupting payment processing.
  • Served on the Architecture Governance Board evaluating technical feasibility of new systems against security, reliability, cost efficiency, and business objectives.
  • Mapped data for a migration of 20,000+ subscriptions onto new billing infrastructure, untangling an undocumented legacy service along the way.

Get in Touch

DM me on LinkedIn at linkedin.com/in/janitam

Specializations

Cloud SecurityCompliance AutomationRisk ManagementSecurity Architecture

Languages & Tools

BashJavaScriptPythonSQLTerraformTypeScriptJava

Frameworks

NIST 800-53NIST CSFPCI-DSS

Certifications

CGE-AUD, Certified GRC Engineer Auditor Specialty, GRC Engineering ClubCGE-P, Certified GRC Engineer Practitioner, GRC Engineering Club (in progress)AWS Certified Solutions Architect, Associate

Projects

infra-modules

Reusable Terraform modules and Conftest/OPA policies, built to learn policy as code and give future projects a pre-vetted starting point.