Solution-focused GRC/Cybersecurity Analyst with six years of experience in conducting system security categorizations, security control assessments, risk assessments, and providing recommendations to enhance the security posture of information systems. Information Assurance, Policy & Procedures Development, Risk Management, Information Security Compliance, Continuous Monitoring. Highly skilled in industry framework such as ISO-27001, NIST-80053, HITRUST, PCI-DSS and SSAE18 (SOC 1&2), CLOUD Assessment. Experienced leveraging in industry GRC Tools such as RSA Archer, OneTrust, Service now and JIRA. Results-driven with notable success in planning, analysis, and implementation of security initiatives. Risk Register for documenting notable risk findings.