Looking for a job

Beth Gerharts

@bethgerharts

Cloud GRC Analyst with B.S. in Cybersecurity. Built Risk Whisperer (AI control mapper) & AWS evidence automation. NIST, ISO 27001, SOC 2 experience.

United States

Message

In my independent SOC 2 Type 1 advisory engagement for a fintech client, I defined trust-services scope, control boundaries, and wallet-segregation requirements for a multi-asset custody platform, evaluating assurance frameworks against operational and liquidity-provider risks.

At ROKS (Rock Stable Token, LLC), via Riipen,I assessed cloud and internal IT controls against NIST and ISO 27001 requirements. During an active incident investigation, I traced an exposed private key published in GitHub and evaluated downstream impact across Cloudflare and DigitalOcean environments.

Technical Projects & Tools:

Risk Whisperer: Built an AI-powered GRC control assessor mapping controls across 15 compliance frameworks with remediation tracking.
Python Evidence Collector: Developed automation that checks GitHub branch protection and logs timestamped compliance evidence.

Background & Education: B.S. in Cybersecurity and Information Assurance. Certifications: Security+, CySA+, PenTest+, AWS Certified Cloud Practitioner. Previously founded and operated Betty Bangs Swimwear, managing business IT systems, regulatory compliance, licensing, and vendor risk.

Experience

Work history, roles, and key accomplishments

Current

SOC 2 Type 1 Compliance Advisor

Current

Independent Consulting Engagement

Jan 2026 - Present (9 months)

Advanced SOC 2 Type 1 readiness for a multi-asset custody platform by defining trust-services scope, control boundaries, and wallet-segregation requirements. Shaped investor-assurance strategy by evaluating SOC 2 and alternative assurance frameworks against operational and liquidity-provider risk considerations.

SOC2 AICPA Trust Services Criteria Control Design Wallet Security Risk Assessment

Cybersecurity GRC Analyst & Solutions Developer

ROKS (Rock Stable Token, LLC)

Jan 2025 - Dec 2025 (11 months)

Delivered a full-scope compliance assessment and control testing across cloud and internal IT assets by mapping policies, risks, and controls to NIST and ISO 27001 requirements. Identified a significant security exposure by tracing an active incident to a private key published in the company's GitHub repository and assessing downstream exposure across the Cloudflare and DigitalOcean environment.

NIST ISO 27001 Risk Assessment Control Testing GitHub Cloudflare DigitalOcean Dialogflow Kali Linux Trello

Tech Volunteer

Cutler Ridge Community Center

Jan 2023 - Dec 2025 (2 years 11 months)

Improved community cyber-awareness by delivering hands-on training sessions covering phishing detection, password hygiene, and device-safety best practices.

Cyber Security Awareness Phishing Detection Password Hygiene Training

Founder & Operator

Betty Bangs Swimwear

Jan 2013 - Dec 2025 (12 years 11 months)

Directed regulatory, licensing, and vendor-risk compliance for a boutique retail brand, while owning full operational and financial control, including budgeting and vendor contracts. Reduced operational dependency on external support by administering business IT systems and authoring internal how-to documentation and procedures for staff.

Regulatory Compliance Vendor Risk Management Budgeting IT Administration Documentation