Accomplished cyber security professional with over 13 years of experience in Information security, Governance, Risk and Compliance (GRC), Data privacy, IT Audits, Third party Risk assessments, Incident Response, Risk Management, Cyber Resilience, Security Awareness and Training. I have conducted in-depth IT audits, assess compliance with information
security policies. I have consulted and helped several organizations in achieving compliance with international standards, such as ISO 27001, PCI DSS, SOC2, SOX and NIST. I have expertise in conducting several detailed risk assessments, IRAM (Information Risk Assessment Methodology) business impact analysis, control gap reviews, and producing risk reports for
critical business or engineering information systems, both internal and external to the organization.