Agnes Kuteyi

I am a seasoned Governance, Risk, and Compliance (GRC) professional with extensive experience in regulatory compliance, contractual risk analysis, and cybersecurity governance, particularly within healthcare environments. My career has been marked by a commitment to enhancing organizational resilience through effective risk management strategies and compliance frameworks. I have successfully delivered over 150 RFPs, audits, and due diligence responses, ensuring alignment with critical standards such as NIST 800-53, HITRUST CSF, ISO 27001, PCI DSS, and HIPAA.

In my current role as a Senior IT Risk Analyst at the Center for Social Change, I lead comprehensive cybersecurity risk assessments and facilitate executive-level reporting. My ability to translate complex risk data into actionable insights has influenced strategic decision-making and resource allocation. I am passionate about fostering a culture of risk awareness through cross-departmental workshops and training sessions, which have significantly improved risk identification and remediation across IT and business units.

Throughout my career, I have implemented automated tracking and reporting systems that enhance visibility for senior leadership, reducing manual risk assessment time by 40%. My dedication to continuous improvement and regulatory adherence has been instrumental in supporting numerous audits and compliance reviews, ultimately contributing to the overall security posture of the organizations I have served.