Samuel Godswill Ntrakwa

Experienced Governance, Risk, and Compliance (GRC) Analyst with over a decade of expertise across cybersecurity, healthcare policy, and public health sectors. Proven track record in IT audit, risk management, and cybersecurity within regulated environments, particularly healthcare. Skilled in applying frameworks like NIST, COBIT, HITRUST CSF, SOC 2 Type 2, and HIPAA compliance to ensure robust information security and compliance standards. Seeking to leverage strong technical acumen and healthcare background in a Senior GRC Analyst role at Guthrie Health.

Title: Governance, Risk, and Compliance Analyst (GRC) | Information Systems Auditor | Cybersecurity Professional

• Achieved a 25% improvement in audit readiness and ensured 100% compliance with HIPAA regulations by implementing HITRUST CSF, SOC 2 Type 2, and NIST frameworks.
• Reduced compliance-related incidents by 30% through the development and implementation of internal controls and security policies.
• Contributed to a 40% reduction in cybersecurity vulnerabilities across multiple systems by designing and executing GRC roadmaps.
• Decreased incident resolution time by 35% through the development and execution of incident response plans.
• Increased compliance audit scores by 20% during IT audits, identifying and addressing gaps in governance and cybersecurity frameworks.
• Led SOC 2 Type 2 and HITRUST audit preparation for healthcare clients, resulting in successful certification and a 15% reduction in audit preparation costs.
• Implemented security solutions that led to 35% fewer recurring security incidents, improving overall cybersecurity resilience.
• Achieved 100% compliance during internal audits by applying HIPAA-compliant data management practices in healthcare settings.
• Reduced data breaches by 25% through the development of risk management strategies focused on patient confidentiality and data privacy
• Contributed to a 30% improvement in regulatory compliance by developing and implementing public health policies.
• Reduced data privacy incidents by 20% through effective collaboration with healthcare organizations to address cybersecurity and privacy concerns.