I am an entrepreneurial-minded GRC (Governance, Risk & Compliance) professional with deep roots in information technology and a great passion for all aspects of GRC, enterprise and operational risk management, and process improvement. I have a wide knowledge of enterprise GRC platform technologies, process management, workflows, data analytics, and management reporting with strong organizational, technical, and information data management skills to tackle almost any environment or culture. I can analyze and assess risk and help design appropriate controls to mitigate risk working in a collaborative environment across all lines of defense. I have years of experience designing, administrating, and managing enterprise-wide risk and controls platform technology/infrastructure, molding risk culture, and producing associated metrics and reporting at the senior and executive management levels and all levels of the firm. Additional skills and experience include assessing internal controls frameworks and alignment with industry frameworks such as OCEG GRC, COBIT, NIST, ISO 31000, and other standards and guidelines. My professional journey has been a natural progression through years of experience in GRC, Enterprise Risk Management, Operational/Technology Risk Management, IT Audit Readiness, and IT project management. I have been a strong believer in continuous education, becoming a subject matter expert in whatever I do, performing and leading by example for excellence, and being an effective advisor to senior/executive management and all employees within my circle of influence. I am a versatile risk and compliance professional and leader who thrives on innovation and turning great ideas and visions into reality. I view complexity as an opportunity and seek to understand and master the many complexities within governance, risk, and compliance (GRC) management, to resolve issues, mitigate and manage risk, and establish GRC excellence.