👋🏾Tina H. Email & Phone Number

Atlanta, Ga, Us

Atlanta, Ga, Us

Upper Marlboro, Maryland, United States

GRC Program Development: Contributed to enhancing the GRC program by aligning cybersecurity practices with frameworks like ISO, NIST, and PCI DSS, improving the organization’s security posture and ensuring compliance with industry standards.Cybersecurity Risk Assessment: Conducted thorough risk assessments of IT and business operations, identifying potential vulnerabilities and recommending actionable strategies to mitigate risks and strengthen security measures.Security Policy Implementation: Assisted in the development and rollout of cybersecurity policies, standards, and procedures to ensure adherence to regulatory requirements, including HIPAA, PCI-DSS, and SOC 2.Audit and Compliance Oversight: Supported internal and external cybersecurity audits by evaluating security assessments, vulnerability reports, and penetration tests, and prepared detailed documentation on audit findings and mitigation plans.Vendor Risk Evaluation: Engaged in third-party risk assessments, analyzing vendor security practices and addressing security inquiries to ensure alignment with organizational risk tolerance and compliance needs.Compliance Training and Awareness: Developed and delivered training programs to enhance staff understanding of compliance requirements and best practices, fostering a culture of security awareness across the organization.

Vendor Security Assessments: Conducted comprehensive third-party security assessments for all new vendors and reassessed existing vendors, ensuring alignment with organizational risk tolerance and regulatory requirements. (Risk Management, Analytical Skills)Security Posture Evaluation: Reviewed vendor security questionnaires (SIG) and supporting evidence to assess their cybersecurity posture and identify potential vulnerabilities. (Critical Thinking, Attention to Detail)Vendor Risk Inventory Management: Developed and maintained an extensive inventory of third-party vendors and suppliers, tracking their cybersecurity risk profiles to support effective risk management and decision-making. (Data Management, Organization)Cybersecurity Risk Guidance: Provided actionable guidance and recommendations to internal teams on best practices for managing third-party cybersecurity risks, fostering a proactive security culture. (Communication, Collaboration)Common Controls Framework Implementation: Assisted in the design, implementation, training, and maintenance of a common controls framework to support continuous monitoring and testing of security controls related to SOC 2 and PCI-DSS compliance. (Compliance Management, Training)Continuous Monitoring and Reporting: Monitored third-party vendors for changes in cybersecurity risk profiles and promptly reported concerns to management to mitigate potential threats. (Monitoring, Reporting)Gap Analysis and Remediation: Conducted in-depth gap analyses to identify non-compliance and potential risks, collaborating with internal and external teams to develop effective remediation strategies. (Problem Solving, Teamwork)Regulatory Compliance: Stayed current on evolving IT regulations, laws, and standards, conducting regular reviews to ensure the organization’s compliance posture remained robust and up-to-date. (Regulatory Knowledge, Adaptability)

Atlanta, Georgia, United States

Vendor Due Diligence: Led the selection and oversight of subcontractors, conducting thorough due diligence to secure favorable terms and ensure adherence to quality and compliance standards.Contract Negotiation: Negotiated and managed contracts with subcontractors and suppliers, aligning terms with project budgets and regulatory requirements to achieve cost-efficiency and compliance.Risk Management: Developed and executed project budgets and timelines, implementing risk mitigation strategies to manage compliance and financial risks effectively.Regulatory Compliance: Oversaw the permit acquisition process, ensuring all projects adhered to local, state, and federal regulations to minimize legal and financial risks.Stakeholder Coordination: Coordinated with contractors, suppliers, and regulatory agencies to align project objectives with compliance requirements, ensuring successful project outcomes.Data-Driven Analysis: Utilized project management tools (JIRA) to monitor project progress, analyze performance data, and generate reports for informed decision-making and enhanced risk control.

Duluth, Georgia, United States

Vendor Due Diligence: Executed detailed supplier evaluations to ensure alignment with compliance, quality, and risk management standards, enhancing supply chain resilience.Contract Negotiation: Negotiated vendor agreements focusing on compliance, quality, and cost-efficiency, promoting sustainable and risk-averse supply chain practices.Risk Management: Implemented the 5S methodology to improve safety and operational efficiency, significantly mitigating risks within supply chain operations.Cross-Functional Collaboration: Led teams to optimize procurement and inventory processes, aligning with broader risk management and regulatory compliance goals.Process Improvement: Enhanced procurement and inventory workflows by identifying and mitigating risks, ensuring adherence to industry regulations and company policies.Training and Development: Developed and delivered training programs for staff, improving understanding of compliance standards and risk mitigation strategies across the supply chain.