Looking for a job

Alice Richman

@alicerichman

Message

Experienced GRC specialist bringing a consultative, business-minded approach and thinks like a CEO.

United States

Message

What I'm looking for

I am looking for an opportunity to strengthen the security posture and reduce risk exposure for your organization. I bring a forward-thinking, collaborative and consultative approach to your team.

I am an information security professional with 5+ years of experience in GRC best practices, internal compliance audits, and quantitative risk assessments. I have a proven track record of bringing companies into compliance with governance frameworks and ensuring continuous improvement. I excel at leading and influencing change within complex organizational environments, fostering collaboration and relationship-building with stakeholders. My excellent interpersonal, verbal, and written communication skills enable me to effectively communicate with diverse teams and stakeholders.

Throughout my career, I have developed policies, controls, and procedures mapped to various frameworks and standards such as CIS Controls, NIST 800-53, NIST 800-37, PCI DSS, ISO 27001, ISO 27017/27018, FISMA/RMF/FedRAMP, NIST 800-171, HIPAA, HITRUST CSF, SOX, COSO, and COBIT. I am adept at implementing comprehensive information security programs that assess, mitigate, and monitor risk to protect sensitive data from unauthorized access.

Experience

Work history, roles, and key accomplishments

Governance, Risk & Compliance Analyst

SYMPOSIA

Implemented a comprehensive information security program, drafted and reviewed organizational policies, championed Third-Party Vendor Risk Management, provided strategic guidance on remediating vulnerabilities, promoted workforce training, and leveraged leading GRC tools.

GRC Risk Management Information Security Third Party Risk Management Slack Jira ServiceNow Qualys Microsoft Office Suite PowerPoint

Co-Founder, GRC & Enterprise Risk Analyst

UNITEE BRAND MARKETING

Applied an entrepreneurial and consultative approach to enterprise risk management, spearheaded strategic GRC initiatives, collaborated on internal compliance audits, implemented Business Continuity Planning and Incident Response, assessed third-party vendor risk, facilitated internal audits, and gathered artifacts for the FedRAMP authorization package.

GRC Enterprise Risk Management Internal Audit Business Continuity Incident Response Risk Assessment FedRAMP ISO 27001

Co-Founder, Ecommerce Marketing Strategist

UNITEE BRAND MARKETING

Developed and implemented data-driven strategies, drove business development through B2B partnerships, managed online presence for private-label brands, exceeded 95% seller-fulfillment metrics, grossed over $300K in revenue, optimized product listings, and maintained compliance with Amazon third-party merchant policies.

B2B Amazon Third Party Merchant Policies Fulfillment

Co-Founder, Business Consultant

HOLISTIC HEALTH GROUP

Implemented standard safeguards to protect patient health information, managed online dispensary, maintained confidentiality of patient ePHI, performed internal audit in compliance with HIPAA, and conducted quarterly security awareness training.

Online Dispensary Management HIPAA Security Awareness