Merveille Kalubi

GRC Analyst,Compliance Analyst, Risk Analyst,Information Security, Compliance Officer

Toronto, Ontario, Canada

View resume

Details

Cybersecurity Program Name: IT Audit & GRC

Skills

GRC • IT Audit • IT Controls • Risk Assessment • Compliance • ISO 27001 • SOC 2 • NIST CSF • OSFI B-10 • OneTrust • ServiceNow • Jira • Confluence • SharePoint • Active Directory • IAM • User Provisioning • User Deprovisioning • Access Governance • Audit Evidence Collection • Control Testing • Documentation Reviews • Policy Compliance • Remediation Tracking • Incident Management • Splunk • AWS • Azure • Microsoft 365 • Excel • Windows • Bilingual English & French

About

GRC and IT Audit professional with experience in compliance documentation, audit evidence collection, user access management, and IT controls across technology and financial services environments. Proficient in OneTrust, ServiceNow, Jira, Confluence, SharePoint, and Active Directory. Hands-on exposure to ISO 27001, SOC 2, NIST CSF, and OSFI B-10 frameworks. Currently pursuing GRCP (OCEG) and ISC2 CC certifications. Bilingual in English and French. Passionate about helping organizations maintain audit-ready, well-governed IT environments.