Arpit Dhanotiya

Background

About Arpit Dhanotiya

Governance, Risk, and Compliance (GRC) and Information Security with 10+ years of hands-on experience delivering end-to-end compliance, risk, and assurance programs. I work closely with organizations to operationalize regulations, embed security and privacy by design, and accelerate measurable outcomes across global regulatory environments.I have led multiple large-scale implementations and management of Information Security Regulations (ISR – Dubai), ISMS (ISO/IEC 27001), PCI DSS 4.0, NESA (UAE IAR), enterprise GRC programs, Archer & OneTrust Implementations, COBIT, supporting organizations across the UAE, Saudi Arabia, Qatar, Kuwait, India, and the USA. I consistently partner with global clients to innovate, automate, streamline, and accelerate their GRC and compliance journeys, aligning security initiatives with business objectives and regulatory expectations.My core expertise includes information security policy and process development, ISR and ISO 27001 implementation, PCI DSS 4.0 compliance, RSA Archer implementation, OneTrust implementation, ISO 22301 (Business Continuity), and data privacy programs including DPIA, ROPA, and DSAR. I also have strong experience in technical risk assessments, common control frameworks, NESA, RCSA, Operational Risk Management (ORM), IT risk management, IT control assurance, policy management, Third-Party Risk Management (TPRM), and GDPR compliance.With extensive multi-cultural and cross-regional experience, I have successfully led and delivered projects across the USA, India, UAE, Saudi Arabia, Kuwait, and Qatar, managing full project lifecycles while ensuring alignment with local regulatory frameworks such as ISR, SAMA, and NESA (UAE IAR).