TurnKey GRC specializes in information security program engineering and compliance. We can build your security program from the ground up or make expert recommendations on existing programs. We can also assist in building your compliance program and work with the audit team to audit.

• Created and implemented a comprehensive organizational security program to ensure appropriate levels of confidentiality, integrity, availability, safety, privacy, and compliance with applicable regulatory, statutory, and contractual requirements.• Define and write security policies, controls, and standards.• Communicate risk and security concerns to upper management• Complete client level security questionnaires• Conduct internal and external information security assessments, including security audits and risk assessments.• Manage information security compliance and certification programs including SOC 1, SOC2, GDPR, ISO27001 and other statutory compliance needs, along with internal audit and data privacy programs.• Created and presented a comprehensive and interactive data security training & awareness program• Serve as advisor for the CIO other business leaders to help achieve business objectives while meeting security goals

- Develop SQL to use as validation against the developers SQL to ensure requirements are met.- Validate ETL processes using SSIS - Validate reports created from SSRS- Assist in the development of Data automation strategy including Jenkins integration.- Develop test cases to validate story requirements.

Responsibilities Include:- Implementation of test automation, functional tests, regression tests.- Specialization in security testing including penetration, fuzz, vulnerability testing.- Load, Performance, and Database testing- Management of test environments including database and client servers.- Tier 1 client support- Assist in database performance tuning. - Maintain development and QA database servers.- Train team members on TSQL and other database functions.