Vibhuti Dahiya
Atlanta, USA
About Me
Cybersecurity was the first thing in engineering that truly clicked for me. I earned my CEH before I'd even finished my undergrad, and I've been building on that ever since.
I'm a GRC professional with consulting experience across healthcare, financial services, telecom, insurance, and tech. I started at Grant Thornton in India, moved to Accorian, and recently finished my M.S. in Cybersecurity at Georgia Tech, where my focus broadened into privacy and AI governance.
What I love most about GRC is the variety: new projects, environments, frameworks, and people. I enjoy digging into a new standard and working out how it applies in practice, and I'm always looking for the next thing to learn. The intersection of GRC, privacy, and AI is where I want to keep growing.
I've volunteered with IEEE since 2019, starting in my undergrad years, because I like being around people who share what they know and help others grow.
Experience Highlights
- SOC 2 gap assessment across all five Trust Services Criteria
- Common Controls Framework unifying ISO 27001, SOC 2, NIST CSF 2.0, and HIPAA
- ISO 27001 internal audits for multiple clients
- Built ISO 42001 AI Management System toolkit
- NIST SP 800-30 risk assessment for a major NY Health Information Exchange
- HIPAA risk assessments for six healthcare entities
- Tabletop exercises across incident response, business continuity, and disaster recovery
- ITGC and SOX audits for financial services clients
- RBI-guideline risk assessments for 25+ partners of India's largest credit bureau