Amina Weah Email & Phone Number

Fredericksburg, Va, Us

• Coordinate audits (SOC 2, PCI-DSS) and use JIRA to assign evidence requests, track status, and facilitate communication with stakeholders.• Contribute to developing and maintaining Governance, Risk, and Compliance (GRC) frameworks to strengthen governance and risk management practices.• Conduct comprehensive risk assessments and audits to ensure compliance with industry standards and regulations and improve overall security posture.• Use GRC tools like RSA Archer and ServiceNow to track and manage security incidents, achieving faster incident response times.• Oversee the revision and update of IT security policies and procedures, aligning them with ISO 27001 standards and enhancing audit outcomes.• Lead audits of pharmacy operations, address regulatory discrepancies, and reduce the risk of federal fines.• Identify and address control deficiencies during SOX audits, collaborating with stakeholders to develop and implement corrective actions to strengthen control frameworks.• Manage GRC functions for an international specialty insurance firm, including security and risk assessments, user awareness training, audit support, and regulatory compliance (SOX, PCI, GDPR).• Implement security policies and procedures to ensure compliance with standards like PCI-DSS and HIPAA.• Collaborate with internal teams to address compliance gaps, develop POAMs, and ensure ongoing adherence to regulatory standards such as ISO 27001 and SOX.• Conduct comprehensive security assessments, including A&A processes, system security plans, and SAR, to maintain compliance with NIST 800 Series and RMF.• Use Nessus and Wireshark for vulnerability assessments, identifying and mitigating high-risk vulnerabilities to strengthen network security.

Wayne, Pennsylvania, United States

• Evaluated third-party vendors' security postures through comprehensive risk assessments, identifying potential risks to organizational data and systems.• Developed and implemented third-party risk management (TPRM) policies, procedures, and standards in alignment with industry regulations and organizational objectives.• Performed regular security reviews and audits of third-party vendors, uncovering vulnerabilities and recommending remediation actions to mitigate identified risks.• Supported incident response efforts related to vendor-related security incidents and breaches, collaborating with cross-functional teams for timely resolution and reporting.• Completed assessments and questionnaires for third-party vendors and clients regarding internal IT security and data privacy policies.• Created and managed POAMs for third-party security issues, systematically tracking and resolving risks.• Championed initiatives to enhance data privacy practices within vendor agreements, achieving compliance with GDPR and other regulatory frameworks, and resulting in a 95% satisfaction rate in vendor surveys.• Delivered quarterly vendor risk reports to senior management, enabling informed decision-making and proactive risk mitigation.• Analyzed security assessment reports and vulnerability scan results using Nmap and Nessus, mitigating critical vulnerabilities to safeguard sensitive data and maintain operational resilience.• Applied PCI standards to evaluate and address third-party cyber risks, protecting sensitive cardholder data effectively.• Collaborated with security, audit, and risk management leadership to conduct security program assessments and define annual strategic technology and budgetary plans.• Spearheaded the implementation of a new SIEM system, enhancing real-time threat monitoring and reducing incident response times by 25%.