Experienced Governance, Risk & Compliance (GRC) Specialist with over two decades of progressive expertise in cybersecurity, risk management, and compliance across diverse industries. Skilled in developing and implementing robust policies and frameworks that align organizational actions with strategic objectives, ensuring adherence to regulatory requirements, and managing risk across complex environments.In my recent role, I have managed comprehensive cybersecurity assessment programs, facilitated risk control self-assessment (RCSA) sessions, and ensured compliance with key frameworks, including PCI DSS and ISO 27005:2018. I’ve contributed to global security efforts, conducting risk assessments for critical events such as FIFA 2022 and driving the effective implementation of PCI controls.Previously, I led teams in cybersecurity operations, orchestrating security strategies across IT, cybersecurity, and physical security domains. I designed and implemented GRC solutions and Security Operations Centers (SOC), introduced SOC KPIs, and established operational playbooks that streamlined incident response processes.As a Manager at IBM, I directed an international SOC team, developed playbooks for incident management, and ensured optimal SIEM tuning to improve detection and response times. At Paladion Networks and Deloitte, I further enhanced my leadership skills, executing strategic initiatives that strengthened information security governance, facilitated BIA and RA sessions, and developed tailored training programs for security awareness.My expertise includes setting up secure Offshore Delivery Centers, managing vulnerability assessments and penetration testing, and implementing DLP and SOC solutions to boost efficiency and reduce incidents. Passionate about fostering a proactive security culture, I am committed to continuous improvement and driving change to safeguard organizational assets and align with business goals.