Risk Management Analyst
CurrentAuditor/Audit Liaison: SOC 1 (2023, 2024), SOC 2, ePHI, SLR- Worked closely with Ernst & Young and CareFirst Corporate Audit & Advisory Services, coordinating evidence requests from dozens of POCs across the organization- Designed Controls Database, fusing data from 20+ individual audits and control language.- Contributed Controls Impacted analysis to Risk Assessment project.- Process/System Narrative analysis and revision (benefits administration, enrollment, claims, change management, user access, information security, incident management and more)- NIST 800-53 Framework knowledge- System and control mapping (Mural, etc.)