Skills
GRC & IT Compliance • IT General Controls (ITGC) • Control Testing • Risk Assessment • Gap Analysis • Audit Coordination • Security Governance • Policy Development • Risk & Control Matrices • Access Management • IAM • Segregation of Duties • Third-Party Risk Management • Remediation Tracking • Audit Evidence Management • PCI DSS • ISO 27001 • NIST CSF • SOC 2 • Jira • Confluence • Microsoft Excel • Drata • Vanta
About
GRC and Cybersecurity Analyst with 6 years of experience in information security, IT compliance, risk management, control testing, audit coordination, access management, and security governance. Experienced with PCI DSS, ISO 27001, NIST CSF, ITGC, policy development, gap analysis, evidence management, and remediation. Strong technical background in Computer and Communication Engineering, with proven ability to translate complex technical and regulatory requirements into practical controls and clear documentation.