Amina Weah Email & Phone Number

Fredericksburg, VA, US

• Coordinate audits (SOC 2, PCI-DSS) and use JIRA to assign evidence requests, track status, and facilitate communication with stakeholders.
• Contribute to developing and maintaining Governance, Risk, and Compliance (GRC) frameworks to strengthen governance and risk management practices.
• Conduct comprehensive risk assessments and audits to ensure compliance with industry standards and regulations and improve overall security posture.
• Use GRC tools like RSA Archer and ServiceNow to track and manage security incidents, achieving faster incident response times.
• Oversee the revision and update of IT security policies and procedures, aligning them with ISO 27001 standards and enhancing audit outcomes.
• Lead audits of pharmacy operations, address regulatory discrepancies, and reduce the risk of federal fines.

Wayne, Pennsylvania, United States

• Evaluated third-party vendors' security postures through comprehensive risk assessments, identifying potential risks to organizational data and systems.
• Developed and implemented third-party risk management (TPRM) policies, procedures, and standards in alignment with industry regulations and organizational objectives.
• Performed regular security reviews and audits of third-party vendors, uncovering vulnerabilities and recommending remediation actions to mitigate identified risks.
• Supported incident response efforts related to vendor-related security incidents and breaches, collaborating with cross-functional teams for timely resolution and reporting.
• Completed assessments and questionnaires for third-party vendors and clients regarding internal IT security and data privacy policies.
• Created and managed POAMs for third-party security issues, systematically tracking and resolving risks.