Details
Skills
•Cybersecurity Risk Assessment & Control Evaluation – Conduct risk assessments and control evaluations across IT and business environments, identifying control gaps and documenting findings to support risk-based decision-making.
•Governance, Risk & Compliance (GRC) – Support enterprise GRC initiatives and regulatory compliance requirements aligned with NIST, ISO 27001, SOC 2, and PCI DSS frameworks.
•Security Policy & Standards Development – Develop, enhance, and maintain organization-wide security policies, standards, and best practices to strengthen security posture.
•IT Audit & Controls – Coordinate audit readiness, validate compliance evidence, and partner with Audit, Compliance, and business teams to remediate control deficiencies.
•Risk Reporting & Governance Tools – Build risk reporting, KPI/KRI dashboards, and management reporting using RSA Archer and Power BI to support risk oversight and informed decision-making.
•Emerging Threat & Third-Party Risk Coordination – Research emerging threats and security trends and collaborate on third-party risk assessments, confirming impact and remediation plans across cross-functional teams.
About
Cybersecurity GRC Analyst with 13+ years of experience across governance, risk management, and compliance in global banking, financial services, and enterprise IT environments. Skilled in conducting risk assessments and control evaluations, developing and enhancing security policies and standards, and supporting audit readiness against NIST, ISO 27001, SOC 2, and PCI DSS frameworks. Proven ability to partner with IT, Audit, Compliance, and business stakeholders to document findings, track remediation to closure, and strengthen organizational security posture. Experienced with governance and risk reporting tools including RSA Archer and Power BI to support KPI/KRI dashboards and executive risk oversight.
Profile Photo
