Leading and delivering of IT audits to ensure business risks were recognized and appropriately managed before the company is adversely affected. Activities included scoping, budgeting, meeting with process owners, developing testing procedures, audit testing, reviewing staff work, conducting meetings to present deficiencies, writing final report and work papers sign off. Served as liaison to external auditors regarding internal IT audit issues and procedures.Risk Management:I am skilled in implementing information security infrastructure and balancing security initiatives to external risks and business operations. Highly experienced in implementing new network system security policies and procedures, analyzing security incidents and configuring networks and servers. Proven ability to provide critical support in the development and implementation of IT strategies that achieve business results. I excel at answering security questionnaires, conducting internal assessments, performing business impact analyses, conducting risk assessments, and reviewing SOC 2 Type II reports. My deep understanding of cybersecurity frameworks, including ISO 27001 and 27002, SOC 1 and 2, PCI-DSS, HIPAA, GDPR, CCPA, and HITRUST, propelled me to manage and mitigate risks effectively.Skilled in implementing information security infrastructure and balancing security initiatives to external risks and business operational experience with industry GRC tools like Process unity, ServiceNow, RSA Archer, and OneTrust , logic ManagerProject:- Risk Assessment - Report Writing - SOC 2 Renewal/Certification- Security Questionnaires - Sig lite/core- Risk Mitigation Disaster Recovery/Business Continuity- Vendor Risk Assessment- Policy ReviewCollaboration:- Collaborating with cross-functional teams to enhance security awareness and compliance.- Collaborate with IT staff during security incidents to identify, contain, and remediate threats.- Assist in conducting risk assessments and ensuring that identified risks are addressed in a timely manner.- Work with external vendors to ensure that third-party services meet security standards.- Share relevant threat intelligence with appropriate teams.Documentation:- Maintain records of security configurations for systems, applications, and network devices.- Record detailed information about security incidents, including the timeline, actions taken, and outcomes, for future reference and analysis.- Draft and update organizational security policies, including acceptable use, data protection, and access control policies.