Open to opportunities

Bobby McKnight-Harrison

@bobbymcknightharriso

Message

Results-driven IT auditing analyst with over 10 years of experience.

United States

Message

What I'm looking for

I am seeking a role that allows me to leverage my extensive experience in IT auditing and cybersecurity to help organizations enhance their security posture and achieve compliance.

I am a problem-solver and results-driven IT auditing analyst with over 10 years of experience empowering organizations to reduce cybersecurity risks and achieve compliance through strategic implementation of GRC frameworks such as PCI-DSS, NIST CSF, and NIST RMF. My career has been marked by successfully conducting over 50 comprehensive audits, identifying and closing security gaps by 25%, and assessing network security controls for various businesses, local merchants, organizations, and U.S. Federal agencies.

In my recent role as a Security Control Assessor at TERP TECHS, LLC, I conducted more than 25 PCI-DSS audits, collaborating with cybersecurity teams to evaluate network security controls and system configurations. My efforts led to a 10% reduction in data loss incidents and improved compliance with data security standards. I pride myself on my ability to communicate effectively with stakeholders and implement security controls that enhance the overall security posture of organizations, ensuring alignment with industry standards.

Experience

Work history, roles, and key accomplishments

Security Control Assessor

TERP TECHS, LLC

Jan 2021 - Aug 2024 (3 years 7 months)

Conducted over 25 comprehensive PCI-DSS audits, evaluating network security controls and system configurations to identify and remediate compliance gaps. Collaborated with cybersecurity teams to implement corrective actions, including NIST CSF profiles and DLP policies, significantly strengthening the organization's cybersecurity posture.

PCI DSS NIST CSF Data Loss Prevention Network Security Vulnerability Management Auditing

Administrative IT Auditor

U.S. Department of Justice/Office on Violence Against Women

Nov 2008 - Jul 2018 (9 years 8 months)

Implemented identity access controls for over 200 employees and managed the complete data loss prevention cycle, ensuring 100% compliance with agency IT policies and industry standards. Created internal IT asset management reports and collaborated on agency-wide emergency business continuity policies, enhancing operational continuity and asset tracking accuracy.

Identity Management Data Loss Prevention Asset Management Business Continuity Compliance Policy Implementation

Education

Degrees, certifications, and relevant coursework

University of the District of Columbia

Associate Degree, Mortuary Business

Completed an Associate Degree in Mortuary Business, focusing on the essential aspects of the mortuary industry. Gained foundational knowledge relevant to business operations within this specialized field.