Skip to content
View rajbharti-cyber's full-sized avatar
🎯
Focusing
🎯
Focusing

Block or report rajbharti-cyber

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
rajbharti-cyber/README.md

🛡️ Raj Bharti — Cyber Risk & GRC Consultant

Banner

👋 About Me

I work in Cyber Risk, Technology Risk, and Governance, Risk & Compliance (GRC), helping organizations understand how technology risk translates into business, regulatory, and operational impact.

With experience across regulated industries including healthcare and financial services, I bring a risk-first and governance-driven approach to cybersecurity.

My work focuses on:

  • Technology risk assessments
  • Control effectiveness reviews
  • Audit readiness support
  • Compliance-aligned governance activities
  • Risk reporting and remediation tracking

I regularly support collaboration between:

  • Security teams
  • IT operations
  • Audit & compliance stakeholders
  • Business functions

to ensure risks are:

  • identified,
  • documented,
  • defensible,
  • and aligned with regulatory expectations.

🧭 Core Areas of Focus

🔹 Cyber & Technology Risk

  • Technology risk assessments
  • Control gap identification
  • Residual risk evaluation
  • Risk documentation & reporting

🔹 Governance, Risk & Compliance (GRC)

  • Policy & control support
  • Audit evidence preparation
  • Compliance readiness activities
  • Governance documentation

🔹 Control Testing & Audit Support

  • Design & operating effectiveness reviews
  • Access control validation
  • Security control assessment
  • Audit readiness coordination

🔹 Risk-Informed Security Oversight

  • Security monitoring insights
  • Vulnerability risk review
  • Incident governance support
  • Business-aligned remediation tracking

🧰 Frameworks & Risk Domains

📋 Frameworks & Standards

ISO 27001 • NIST CSF • HIPAA • CIS Controls

📊 Risk & Governance Activities

Risk Assessments • Control Testing • Audit Readiness
Control Gap Analysis • Residual Risk Evaluation

🏢 Governance & Documentation

Policy Support • Evidence Collection • Risk Registers
Security Governance • Compliance Coordination

🛠️ Platforms & Exposure

ServiceNow • EPIC • SIEM Monitoring Outputs
Security Dashboards • Audit Documentation

📁 Featured Projects

🏦 Cyber Risk Management Framework

Structured cyber risk governance framework demonstrating:

  • Risk identification & assessment
  • Residual risk evaluation
  • Risk scoring methodology
  • Control gap assessment
  • Governance-focused documentation

🔗 Repository:
https://github.com/rajbharti-cyber/Risk-Management-Framework

📋 ISO 27001 Policy Suite

Governance and compliance-focused security policy documentation aligned with ISO 27001 principles.

🔗 Repository:
https://github.com/rajbharti-cyber/ISO27001-Policy-Suite

🧪 Incident Response Playbooks

Structured incident governance and response workflows designed to support operational readiness and escalation management.

🔗 Repository:
https://github.com/rajbharti-cyber/Incident-Response-Playbooks

🛡️ Threat Modeling — STRIDE

Risk-focused threat modeling project demonstrating structured identification of security threats and mitigation considerations.

🔗 Repository:
https://github.com/rajbharti-cyber/Threat-Modeling-STRIDE

🎯 Career Focus

I’m currently focused on opportunities in:

  • Cyber Risk Consulting
  • Technology Risk
  • IT Risk & Controls
  • GRC Consulting
  • Audit & Compliance Readiness

I’m particularly interested in helping organizations build:

  • resilient governance models,
  • mature control environments,
  • and risk-aware security practices.

📬 Connect With Me

💼 GitHub: https://github.com/rajbharti-cyber
🔗 LinkedIn: https://www.linkedin.com/in/rajbharti-cybersecurity/
📧 Email: rjbharti545@gmail.com

Pinned Loading

  1. Incident-Response-Playbooks Incident-Response-Playbooks Public

    Governance-focused incident response framework aligned with NIST 800-61, operational resilience, executive reporting, and cyber risk management principles.

    1

  2. ISO27001-Policy-Suite ISO27001-Policy-Suite Public

    Enterprise ISO 27001 governance and policy framework aligned with risk management and audit readiness practices.

    1

  3. Risk-Management-Framework Risk-Management-Framework Public

    Cyber risk governance framework covering control assessment, risk evaluation, remediation tracking, and compliance alignment.

    1

  4. Security-Architecture-Blueprint Security-Architecture-Blueprint Public

    Secure enterprise architecture design covering segmentation, layered defense, IAM, logging, and zero trust principles.

    1

  5. Threat-Modeling-STRIDE Threat-Modeling-STRIDE Public

    Enterprise STRIDE threat modeling assessment with DFD analysis, trust boundaries, attack surface evaluation, and mitigation mapping.

    1

  6. Third-Party-Risk-Assessment Third-Party-Risk-Assessment Public

    Enterprise third-party risk assessment framework covering vendor security evaluation, inherent risk scoring, compliance mapping, and remediation governance.

    1