Open to opportunities

Annabel Nde

@annabelnde

Message

GRC and IT Security professional delivering audit-ready risk and compliance programs.

United States

Message

What I'm looking for

I’m looking for a role where I can own GRC and IT security risk—implement frameworks, run risk assessments and audits, and use SOC/SIEM data to deliver continuous, audit-ready compliance with strong stakeholder alignment.

I’m a results-driven Governance, Risk & Compliance (GRC) and IT Security professional with 8 years of experience across GRC, ISSO, Security Consulting, and Security Analyst roles. I implement security frameworks like NIST, ISO 27001, SOC 2, and HIPAA while partnering with stakeholders to strengthen security posture.

I lead enterprise-wide risk assessments, controls implementation, and security audits to drive continuous compliance. I ensure adherence to standards including PCI-DSS, FedRAMP, FISMA, GDPR, and CCPA, and I manage audit findings through GRC platforms such as RSA Archer, ServiceNow GRC, and MetricStream.

I also bring hands-on Security Operations Center (SOC) experience—monitoring, incident response, and threat mitigation with SIEM tools like Splunk, ArcSight, and LogRhythm. Through remediation strategies, I’ve reduced critical security threats and compliance gaps by 25–30%, while improving audit readiness via continuous monitoring and stakeholder reporting.

Experience

Work history, roles, and key accomplishments

Current

Governance & Risk Analyst

Current

Truist Financial

Sep 2023 - Present (2 years 8 months)

Led enterprise risk assessments and compliance audits, identifying and remediating control gaps to improve the organization’s security posture. Managed RSA Archer/ServiceNow GRC/MetricStream, supported FedRAMP/FISMA/GDPR/CCPA compliance, and reduced audit findings through continuous monitoring and remediation.

Risk Assessment NIST ISO 27001 HIPAA Vendor Risk Management Audit Readiness

IT Security Consultant ISSO

Hewlett-Packard

Apr 2020 - Aug 2023 (3 years 4 months)

Performed system security assessments and audits to support ISO 27001, NIST, SOC 2, and HIPAA compliance. Implemented IAM controls (Okta, CyberArk, SailPoint), supported incident response and vulnerability management with Splunk/QRadar/Qualys/Tenable, and strengthened BC/DR readiness.

ISSO Support ISO 27001 NIST SOC HIPAA Identity and Access Management (IAM)Okta CyberArk SailPoint Incident Response Vulnerability Management

Security Analyst (SOC/GRC)

Dell Technologies

Jun 2017 - Mar 2020 (2 years 9 months)

Monitored and responded to security incidents in a SOC using Splunk, ArcSight, and LogRhythm, and supported internal and third-party compliance assessments. Implemented risk mitigation strategies that reduced critical security threats by 25% and improved audit readiness through policy documentation and compliance reporting.

SOC Incident Response HIPAA FedRAMP PCI DSS Security Policies Compliance Reporting