Open to opportunities

Akua B

@akuab

Message

I lead GRC, IT audit, and regulatory assurance programs across complex enterprise environments.

United States

Message

What I'm looking for

I'm looking to lead enterprise GRC, IT audit, risk, and AI governance programs where I can build audit-ready control environments, coordinate cross-functional stakeholders, and provide clear executive visibility into compliance and remediation progress.

I've led enterprise GRC and IT audit programs at Holland & Knight, SailPoint Technologies, and Home Point Financial, spanning CMMC Level 2, FedRAMP, SOC 2, ISO 27001, and SOX. At Holland & Knight, I led the inaugural CMMC Level 2 assessment across all 110 NIST SP 800-171 practices and directed ServiceNow IRM migration strategy, improving compliance reporting efficiency and accuracy by 80%.

I build governance structure in evolving regulatory environments, from FAIR-based enterprise risk assessments and third-party risk programs to AI governance and ISO/IEC 42001 audit readiness. As a CISA- and CISM-certified professional, I translate control health, remediation progress, and audit status into clear executive reporting while coordinating security, engineering, privacy, legal, and finance stakeholders.

Experience

Work history, roles, and key accomplishments

Current

IT Enterprise Risk Analyst

Current

Holland & Knight LLP

Jul 2023 - Present (3 years 2 months)

Managed audit engagements for SOC 2, ISO 27001, and CMMC Level 2, verifying control alignment and delivering audit status updates. Directed IT enterprise risk assessments using FAIR methodology, reducing risk by 80%, and led third-party risk assessments, reducing exposure by 90%.