Rajdeep Mistri

Cyber Security Associate @ PwC India

About

Cybersecurity professional with 1+ years of experience in Governance, Risk & Compliance (GRC), IT Audit, and Information Security, currently working at PwC. My core experience includes ITGC reviews, gap assessments, IT & infrastructure audits, network and perimeter security audits, and Information Systems (IS) audits across banking and enterprise environments, ensuring compliance with regulatory requirements and industry security standards. I specialize in identifying, exploiting, and mitigating web & API vulnerabilities, with hands-on expertise in BurpSuite , Nmap, WireShark . I also bring strong knowledge of IT Governance & Risk frameworks, having conducted ITGC reviews and gap assessments across banking and enterprise systems. I hold CEH v13 and ISO/IEC 27001:2022 Lead Implementor certifications. With an M.Tech in Information Security from IIIT Allahabad, I am passionate about building expertise in offensive security, penetration testing, and application security architecture, while continuously contributing to strengthening organizations’ security posture. 🔑 Key Skills: Application Security | Web & API Pentesting | Vulnerability Assessment | IT Governance & Risk | CEH v13 | ISO 27001:2023 | Python/Bash Automation

Country

India

City

West Bengal

Industry

Computer Software

Skill

Windows, Cybersecurity Auditing, Web Development, Web Application Development, Event Planning, Computer Architecture, Technical Demonstrations, Electrical Code, Ethical Hacking, IT Automation, Network Integration, Database Testing, Database Management System (DBMS), Security Certification, Operating Systems, React.js, SQL Injection, Software Packaging, Network Security, Total Organic Carbon (TOC)

Experience

Cyber Security Associate

PwC India

2024-10 - Present · 2 yrs

• Performed gap assessment on ITGRC, IT Outsourcing, and Operational Risk Management frameworks. • Perform Vulnerability Assessments (VA) across applications, supported Penetration Testing (PT), identifying risks such as SQL Injection, XSS, CSRF, and API-level threats. • Utilized tools including Burp Suite, Nmap, and Wireshark for web/API security testing, network scanning and traffic analysis, providing remediation recommendations to stakeholders. • Collaborated with cross-functional teams and client stakeholders to track remediation progress, ensuring closure of 80%+ high-risk findings within SLA timelines. • Prepared detailed audit reports, risk dashboards, and executive presentations, translating technical findings into strategic recommendations for senior management.

Trainee

Centre for Development of Advanced Computing (C-DAC)

2024-8 - 2024-10 · 3 mos

• Completed a comprehensive training program on ethical hacking and penetration testing, and Participated in a virtual internship, gaining in-depth knowledge of cybersecurity principles and practical hacking techniques. • Collaborated within a program hosted by a leading scientific organization under the Government of India, strengthening technical and analytical cybersecurity capabilities.