Conducted comprehensive security assessments and audits to identify vulnerabilities and develop mitigation strategies.
Monitored network traffic for potential security breaches and promptly responded to incidents.
Collaborated with cross-functional teams to implement security policies and procedures in alignment with industry standards.
Provided regular reports to management on the status of cybersecurity measures and recommended improvements.
Participated in incident response activities, including analysis, containment, eradication, and recovery.
Key Achievements:
Implemented a new intrusion detection system (IDS) that reduced response time to security incidents by 30%.
Led the development of security awareness training programs, resulting in a 20% decrease in employee-related security breaches.
GRC and Vendor Risk Manager
[Current Company Name], [Location]
[Date Started] - Present
Developed and implemented Governance, Risk, and Compliance (GRC) frameworks to ensure regulatory compliance and mitigate risks effectively.
Evaluated and managed vendor risks through comprehensive assessments and ongoing monitoring activities.
Conducted risk assessments to identify potential threats and vulnerabilities in business processes and IT systems.
Collaborated with internal stakeholders to develop risk mitigation strategies and contingency plans.
Prepared and presented risk reports to executive leadership, highlighting key findings and recommendations.
Key Achievements:
Successfully implemented a GRC platform that streamlined compliance processes and reduced audit cycle time by 25%.
Improved vendor risk assessment procedures, resulting in a 15% reduction in high-risk vendor incidents.
Risk Management
Compliance Management
Vendor Risk Assessment
Security Analysis
Incident Response
GRC Frameworks
Communication Skills
Problem-Solving