Skilled professional with a robust background in America’s (North America and South America) IT Governance, Risk, and Compliance (GRC), specializing in Risk Analysis, 1st Line of Defense control testing, and Project Quality Assurance across traditional waterfall and agile modes. Proficient in Change Quality Assurance and adept at conducting audits for regulatory compliance, including Attestation and 17a5 requirements.Experienced in IT Change Management audit, focusing on Development-related changes, Incidents, and Problem Management audits. Proficient in tracking and closing non-conformity action plans, providing recommendations and implementing Preventive and Corrective Actions (PCA) through specialized tools like R360. Exposure to Risk and Control Self-Assessment (RCSA) processes, including conducting assessments for the AMER region. Committed to driving operational efficiency, risk mitigation, and fostering a culture of continuous improvement. Extensive experience in reviewing Third-Party Risk Management (TPRM), SOX, SOC 1 & 2 reports, and various Cybersecurity Incidents and Audit Reports. Recognized Subject Matter Expert (SME) on tools such as Service Now, Hiperos, ProcessUnity, RSA Archer, JIRA, Clarity PPM, CyberArk, and R360.Proven track record in providing in-depth insights and analysis on TPRM, compliance matters, and cybersecurity incidents. Proficient in interpreting and evaluating key audit reports to drive strategic decision-making and risk mitigation strategies.Demonstrated proficiency in leveraging tools like Service Now, RSA Archer, JIRA, Clarity PPM, CyberArk, and R360 to enhance operational efficiency and streamline processes. Committed to staying at the forefront of technological advancements to address evolving cybersecurity challenges and regulatory requirements.