Dynamic IT professional with 10+ years of experience, pivoting to Cybersecurity Governance, Risk, and Compliance (GRC). Expertise in analyzing complex business requirements, optimizing processes, and translating technical information for diverse stakeholders. Proven track record in delivering innovative solutions and exceptional technical support. Skilled in problem-solving, communication, and bridging business and technology. Leveraging extensive IT background to transition into cybersecurity, combining technical knowledge with emerging best practices in digital asset protection and compliance. Seeking opportunities to apply analytical skills in safeguarding organizations against evolving cyber threats.- Prepared, executed, and reported on audit of subset of NIST SP 800-53 cybersecurity controls to include interview, document review, and testing of systems to support compliance audit activities.- Knowledgeable on NIST Cybersecurity Framework and how the Govern, Identify, Protect, Detect, Respond, and Recover categories comprise and facilitate an information security program.- Developed concise, tailored cybersecurity awareness content, improving targeted end-user base cyber hygiene.- Developed Just-In-Time cybersecurity awareness content for emerging threats to reduce operational risk to tailored audiences.- Semi-quantitatively analyzed cybersecurity risk using NIST SP 800-30 methodology to identify highest risk weaknesses for a system.- Executed threat modeling exercise to determine higher likelihood threat events to inform cybersecurity risk modeling.- Developed Information Security policy to establish authorized access management and authenticator management for internal and third-party personnel.- Ensured policy documents are aligned with business objectives, implementable by the organization, and practical for compliance by ensuring purpose, scope, authority, and policy statements incorporate operational perspective and constraints