Through independent GRC and compliance projects, I've built and maintained risk registers covering security awareness training, laptop encryption, access management, and asset management. I documented risks, existing controls, treatment plans, and remediation status.
I assessed security and compliance domains for control gaps, documented simulated phishing and unauthorized-access incidents, and recommended risk-based remediation measures such as multi-factor authentication and periodic user access reviews.
I also organized audit evidence and compiled structured compliance reports to track findings, remediation owners, target dates, and outstanding actions. I applied the NIST Cybersecurity Framework to business scenarios and aligned recommended controls with risk priorities.
