Chris Conley

I am a Governance, Risk, and Compliance (GRC) analyst focused on strengthening audit readiness and vendor risk programs aligned with ISO 27001 and SOC 2. I translate regulatory frameworks into actionable controls that improve compliance posture and reduce third‑party risk.

I have hands‑on experience developing ISO 27001 and SOC 2–aligned deliverables such as Risk Registers, Data Classification Policies, and Access Control Procedures, and I conduct mock internal audits and vendor risk reviews to evaluate control maturity.

As a consultant and engagement lead, I delivered measurable improvements — for example, improving nonprofit audit readiness by 20% within 60 days and closing compliance gaps through SIG Lite vendor assessments and remediation roadmaps.

I hold CompTIA Security+, ISO/IEC 27001 Lead Implementer and Lead Auditor certifications, and I prioritize async, resilience‑focused operations, policy development, and clear governance reporting to support executive stakeholders.