Results-driven Governance, Risk, and Compliance (GRC) Analyst with 5 years of experience in healthcare and financial industries. Expertise in IT risk assessments, third-party risk management, regulatory compliance, and security frameworks such as NIST, ISO 27001, ISO 42001, GDPR, CCPA, and HIPAA. Skilled in mapping security controls, incident response planning, IAM assessments, and SIEM evaluations to mitigate risks and enhance cybersecurity posture. Adept at conducting vendor risk assessments, privacy impact analyses, and developing enterprise-wide compliance programs.
Conducted IT risk assessments across enterprise systems, identified critical vulnerabilities, implemented remediation strategies, mapped security controls to NIST 800-53, ISO 27001, GDPR, and PIPEDA, led third-party risk assessments, performed asset management security assessments, developed incident response plans, conducted IAM assessments, and managed SIEM assessment and tuning.
Ensured compliance with HIPAA, GDPR, and CCPA through DPIA, PIA, and data security assessments, developed a third-party risk management framework, assessed endpoint security across 1,500+ devices, conducted cybersecurity awareness training, led security control gap analysis, and spearheaded incident response and disaster recovery planning.
AAS, Computer Network Engineering
This professional hasn’t added portfolio projects yet.
This professional hasn’t listed any services yet.
