Skip to content
View workmcg's full-sized avatar
0 followers · 4 following

Block or report workmcg

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
workmcg/README.md

Hi, I'm Mukul 👋

Cybersecurity GRC & Information Security Risk — I turn complex security findings into business-risk decisions leadership can act on.

Currently at EY, working on portfolio security compliance: risk-backlog remediation, real-time risk dashboards, and compliance-workflow automation. Background spans GRC, DFIR, and digital forensics across EY, a DFIR engineering team, and KPMG.

I'm especially interested in where regulation meets operations — ISO 27001, NIST CSF, NIS2, DORA, GDPR — and in building AI-powered tools that make compliance programmes actually run, not just pass an audit.

🔧 What I work with

GRC · ISO/IEC 27001 · NIST CSF 2.0 · NIS2 · DORA · GDPR · COBIT · PCI-DSS
Risk Management · Incident Response · MITRE ATT&CK · Digital Forensics
Python · Bash · Power Automate · Microsoft 365 · OpenAI API · Streamlit

📌 Pinned projects

  • grc-gap-ai — AI-powered compliance gap analyzer: upload a policy document, get a structured gap report mapped to ISO 27001, NIST CSF 2.0, NIS2, or DORA. Built with GPT-4o + Streamlit.
  • ir-playbook-gen — AI-powered IR playbook generator: specify incident type, sector, and framework → get a complete incident response playbook in markdown with containment steps, forensic checklists, and NIS2/DORA notification timelines.
  • control-crosswalk — dependency-free Python CLI that maps controls across ISO 27001:2022, NIST CSF 2.0, and NIS2, with coverage gap analysis and audit-ready CSV export.
  • risk-register-ai — AI risk register: paste audit findings, get a scored, framework-mapped register with inherent/residual scoring and audit-ready export. Streamlit + GPT-4o. Live demo
  • nis2-readiness-checker — dependency-free NIS2 readiness assessment CLI: answer questions mapped to Articles 20, 21(2) and 23, get a scored report and a prioritised remediation backlog.

📜 Certifications

GRCP (OCEG) · In progress: ISO/IEC 27001 Lead Auditor

🎓 Education

M.Sc. Digital Forensics & Information Security — National Forensic Sciences University
B.Sc. Computer Science — University of Delhi

📫 Reach me

LinkedIn · work.mukul.chauhan@gmail.com

Open to GRC / IT risk / information security roles, including opportunities across Europe.

Pinned Loading

  1. control-crosswalk control-crosswalk Public

    A dependency-free Python CLI that maps controls across ISO 27001:2022, NIST CSF 2.0 and NIS2, with coverage gap analysis and audit-ready CSV export.

    Python

  2. grc-gap-ai grc-gap-ai Public

    AI-powered GRC gap analysis — paste a policy doc, get a structured gap report mapped to ISO 27001, NIST CSF 2.0, or NIS2

    Python

  3. ir-playbook-gen ir-playbook-gen Public

    AI-powered IR Playbook Generator -- incident type + sector + framework -> structured markdown playbook

    Python

  4. risk-register-ai risk-register-ai Public

    AI-powered risk register - turn audit findings into scored, framework-mapped risk entries. Streamlit + GPT-4o, ISO 27005 5x5 scoring.

    Python