Open to opportunities

Aidous Ngwe

@aidousngwe

Message

GRC Analyst driving compliance, risk reduction, and business continuity.

United States

Message

What I'm looking for

I seek roles focusing on GRC, risk reduction, and business continuity where I can lead compliance programs, collaborate cross-functionally, and drive measurable security and operational improvements.

I am a GRC Analyst with over six years of experience in IT compliance, risk management, and business continuity, grounded in frameworks such as NIST CSF and ISO 27001.

At DXC Technology I led compliance and certification initiatives, vendor assessments, and third-party issue management, contributing to a 40% improvement in transparency and preventing approximately $2M in potential losses through financial risk assessments.

I designed and executed Disaster Recovery and Business Continuity plans that reduced downtime by 30%, improved audit efficiency by 20%, and reduced high-risk exposures by 35% while supporting GDPR, PCI-DSS, HIPAA, and other regulatory requirements.

I bring hands-on experience with GRC platforms (ServiceNow, AuditBoard, Archer), security controls (IDS/IPS, DLP, SIEM), and cross-functional collaboration to align security and business objectives, aiming to strengthen organizational security posture and compliance readiness.

Experience

Work history, roles, and key accomplishments

Current

GRC Analyst

Current

DXC Technology

Aug 2022 - Present (3 years 6 months)

Supported IT compliance and certification programs (NIST CSF, ISO 27001, PCI DSS), led DR planning reducing downtime by 30%, and conducted financial risk assessments that mitigated ~$2M in potential losses while improving transparency by 40%.

GRC NIST CSF ISO 27001 PCI DSS Third Party Risk Management Disaster Recovery Risk Assessment

Risk & Compliance Specialist

Dell Technologies

Jul 2019 - Jul 2022 (3 years)

Managed third-party compliance and audit readiness (GDPR, PCI DSS, NIST 800-53), refreshed policies to ensure regulatory alignment, and supported incident response and control testing to maintain compliance posture.

Third Party Risk Management GDPR PCI DSS NIST 800 53 Incident Response Policy Development Controls Testing

Scrum Master

TWG Companies

Jan 2018 - Jun 2019 (1 year 5 months)

Facilitated Scrum ceremonies, improved team communication and performance using Jira, and coached teams on Agile practices to increase development efficiency and delivery predictability.

Scrum Agile Coaching Jira Sprint Planning Backlog Management Facilitation