Looking for a job

Chi Lewis

@chilewis

Cyber GRC Analyst at ROVUST building executive Power BI dashboards that track control effectiveness, open risks, and remediation status.

United States

Message

At ROVUST, I prepare executive Cyber GRC dashboards in Power BI and ServiceNow GRC, bringing together control effectiveness, open risks, vulnerability remediation, and regulatory findings for CISO and audit committee reporting.

I also conduct cybersecurity risk assessments and maintain the enterprise cyber risk register. My experience includes IT audit and compliance assessments at UNITED HEALTHCARE and CAPITAL ONE, and I hold CISA and CSM certifications.

Experience

Work history, roles, and key accomplishments

Current

GRC Analyst

Current

Rovust

Aug 2025 - Present (1 year 2 months)

Prepare executive Cyber GRC dashboards in Power BI and ServiceNow GRC, conduct continuous cybersecurity risk assessments, and drive issue management end to end. Lead enterprise Cyber GRC program operations aligned with NIST CSF, NIST SP 800-53, COBIT 2019, ISO 27001/27002, and COSO ERM.

Power BI ServiceNow GRC NIST RMF ISO 31000 NIST CSF NIST SP 800 53 COBIT2019 ISO 27001 27002 COSO AWS Azure CIS Benchmarks POA&M

Risk & Compliance Analyst

United Healthcare

May 2023 - Jul 2025 (2 years 2 months)

Managed risk and control self-assessments (RCSA) with business unit leaders, supported external audit and regulatory examination activities, and executed risk-based IT audit and compliance assessments. Performed IT General Controls (ITGC) testing and conducted internal control assessments aligned to COSO.

RCSA AuditBoard Workiva NIST CSF COBIT2019 HIPAA HITRUST ISO 27001 ITGC COSO

IT Auditor

Capital One

Mar 2020 - Apr 2023 (3 years 1 month)

Prepared audit workpapers, control testing matrices, and management findings reports in AuditBoard and TeamMate+. Planned and executed end-to-end IT audit engagements covering ITGC and ITAC, conducted SOX 302/404 testing, and assessed cybersecurity controls.