# Abdulrahman Soyan

Abdulrahman Soyan is a remote worker on Himalayas, GRC Analyst at Karthik Consulting, based in United States.

Source: https://himalayas.app/@abdulrahmansoyan

```text
GRC Analyst at Karthik Consulting who established a NIST-aligned risk management program and tracks remediation across federal systems.
```

| Detail | Value |
| --- | --- |
| Availability | Open to opportunities |
| Location | United States |
| Authorized to work in | United States |
| Job categories | GRC Analyst, It Auditor, IT Risk Analyst, Cybersecurity Risk Analyst |
| Skills | cybersecurity risk management, Governance Risk And Compliance, Cybersecurity Assessments, Third Party Risk Management, IT Audit, IT General Controls, Control Testing, Control Effectiveness, Regulatory Compliance Auditing, Risk Governance, Vulnerability Management, Audit Remediation Tracking, NIST SP 800 53, NIST CSF, FISMA |

## About

```text
At Karthik Consulting, I created and operationalized a Risk Management Program aligned with NIST SP 800-53 and NIST CSF. I assess cyber risk and security controls across federal information systems and communicate posture and remediation progress through executive dashboards.

I analyze Tenable vulnerability scan results, produce weekly Known Exploited Vulnerabilities reports, and manage Plans of Action and Milestones in CSAM. This work achieved a 95% on-time remediation closure rate.

At Guidehouse LLP, I led risk and OMB A-123A internal control assessments across 10+ federal systems, engaging 100+ stakeholders. I also tested 150+ IT General Controls and reviewed SOC 1 and SOC 2 reports to identify control deficiencies and track remediation.

At Sikich, I conducted ITGC audits and assessed federal security controls using NIST SP 800-53. I recommended control improvements that reduced audit findings by 15%, and drafted security and contingency plans supporting federal compliance.
```

## Experience

### GRC Analyst (current)

Karthik Consulting. Oct 2024 - Present

```text
Created and operationalized a Risk Management Program aligned with NIST SP 800-53 and NIST CSF. Conducted cyber risk assessments, security control assessments, and compliance reviews, and produced executive risk dashboards and reports.
```

Skills: NIST-SP-800-53, NIST-CSF, FISMA, Risk-Management, Security-Control-Assessment, Tenable, CSAM, POA&M, Executive-Dashboards, Governance, Security-Awareness-Training

### Financial IT Consultant II

[Guidehouse LLP](https://himalayas.app/companies/guidehouse). Oct 2022 - Oct 2024

```text
Led risk and OMB A-123A internal control assessments across 10+ federal systems, engaging 100+ stakeholders. Executed testing of 150+ IT General Controls and evaluated SOC 1 and SOC 2 reports for third-party control deficiencies.
```

Skills: OMB-A-123A, IT-General-Controls, SOC-1, SOC2, CSAM, POA&M, Risk-Assessment, Control-Testing, Audit-Readiness, ERP, Stakeholder-Management

### IT Audit Staff

[Sikich](https://himalayas.app/companies/sikich). Jan 2021 - Oct 2022

```text
Conducted ITGC audits across five FISCAM control families and assessed federal security controls using NIST SP 800-53. Analyzed vendor SOC 1 reports and recommended control improvements that reduced audit findings by 15%.
```

Skills: IT-Audit, FISCAM, NIST-SP-800-53, SOC-1, System-Security-Plans, Contingency-Plan, Controls-Documentation, Audit-Training

## Education

### Bowie State University

Bachelor of Science, Business Administration

```text
Bachelor of Science in Business Administration from Bowie State University, completed in December 2020.
```

## Tech stack

- Splunk
- Tableau
- AWS IAM
- Qualys
- CrowdStrike
- SQL
- ServiceNow
- Power BI
- Microsoft Defender

To contact Abdulrahman, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Felicia Awazi](https://himalayas.app/@feliciaawazi): Governance, Risk and Compliance (GRC) Analyst, SAIC
- [Trevon Keene](https://himalayas.app/@trevonkeene): Senior IT GRC Analyst, CACI
- [Komla Bokor](https://himalayas.app/@komlabokor): GRC Risk Controls & Data Analyst, Arvest Bank
- [agyekum User](https://himalayas.app/@agyekumuser): Senior GRC Analyst, Lockheed Martin
- [Afam Afam](https://himalayas.app/@afamafam): IT Auditor / GRC Security Analyst, Bamboo Health
- [Eddie Keveney](https://himalayas.app/@eddiekeveney): GRC Specialist, Children's Healthcare of Atlanta
- [Xavier Dobey](https://himalayas.app/@xavierdobey): Senior GRC Specialist, Centers for Disease Control and Prevention
- [Michael Ayodele](https://himalayas.app/@michaelayodele): GRC Analyst, Top Group Technologies
- [Chuck Unaegbu](https://himalayas.app/@chuckunaegbu): Senior Risk & Compliance Analyst / ISSO, KLDiscovery
- [Chi Lewis](https://himalayas.app/@chilewis): GRC Analyst, Rovust