Responsible for management and execution of governance, risk, and compliance (GRC) services including IT risk management and assessment, IT audit, compliance, and governance, cloud security assessment, virtual CISO, network vulnerability assessment and penetration testing, and regulatory and framework compliance projects (GDPR, HIPAA, PCI, SOX, FFIEC, NERC-CIP, ISO 27002, ITIL, NIST). Industries served include financial, government, technology, healthcare, energy, manufacturing, education, and insurance.