Amanda Caspa

I’m a Cybersecurity Governance, Risk & Compliance (GRC) professional with over six years of experience supporting enterprise governance, cybersecurity risk management, and regulatory compliance programs. I’m CRISC-certified and known for collaborating with technical and business stakeholders to strengthen an organization’s security posture and support compliance objectives.

In my current role as a Cybersecurity GRC Analyst, I coordinate cybersecurity governance and compliance activities and manage RMF documentation such as SSPs, SARs, POA&Ms, and audit evidence. I support programs aligned with NIST RMF, NIST CSF, HIPAA, PCI DSS, SOC 2, FISMA, and ISO 27001, including internal and third-party cybersecurity risk assessments and audit readiness.

I also focus on Identity & Access Management through logical access reviews, RBAC validation, Active Directory administration, and user access governance. I contribute to DLP and data classification efforts, endpoint security and vulnerability management (including analyzing Nessus results), incident response documentation and evidence collection, continuous monitoring, and compliance reporting using Power BI—while maintaining audit-ready documentation within CSAM.