Nhyira A Email & Phone Number

• Participate in various department projects as a GRC representative to provide GRC guidance and interpretation of policies, standards, regulations, risks, and best practices.
• Manage exception program to ensure continuous compliance of internal policies and industry control frameworks.
• Evaluate exceptions via identifying the non-compliance of why an exception is needed, risk profile, identifying compensating controls to help mitigate the risk.
• Work with stakeholders through the exception process including finalizing reports with recommendations based on the risk and compensating controls available.
• Share finalized reports with GRC Director and CISO for their final approval of the exceptions.
• Monitor and track exceptions to ensure permanent controls are put in place and work with stakeholders if an extension is needed based on business need.

Remote

• Perform detailed Assurance Assessments through execution of quarterly, biannual, and periodic assessments and quality assurance reviews.
• Manage project activities for performing assessments, developing strategies, and implementing Identity and Access Management solutions.
• Develop, document and maintain information security identity and access control strategy and operational procedures, processes and guidelines.
• Identify any industry standard violations, communicate with senior management and leaders of the violation(s) and provide detailed report including any identified exceptions and remediation action plans.
• Develop and review system security control artifacts for compliance with NIST 800 guidelines and agency’s security requirements.
• Ensure compliance for information security solutions, controls, tools, and techniques by leveraging current and new capabilities/processes that governs and protects the company’s assets.

• Assist with security documentation such as Risk Assessments, Incident Response Management, Change Control procedures and Standard of Operation and Procedures (SOP).
• Responsible for researching and evaluating relevant information security policies, guidance, and best industry practices for applicability to IT systems security.
• Monitor controls post authorization to ensure continuous compliance with the security requirements by evaluating threats and vulnerabilities through Nessus scan results and work with the IT and Security staff for.
• Conduct walkthroughs; formulate test plans, documented gaps, test results,and exceptions.
• Perform IT operating effectiveness tests in the areas of security, operations, change management, and email authentication.
• Develop the audit plan and performed the General Computer Controls testing of Information Security, Business Continuity Planning, and Relationship with Outsourced Vendors.