Skip to main content
DT
Open to opportunities

Dara Thomas

@darathomas

I build practical GRC programs, risk assessments, and audit-ready controls that people actually follow.

United States
Message

What I'm looking for

I'm looking to apply practical risk assessment, control mapping, policy development, and audit-readiness experience to information security governance, helping teams build controls that satisfy auditors and work in practice.

I've applied 15+ years of risk, compliance, and audit work across manufacturing, healthcare, SaaS, and information security governance. As an independent consultant, I've conducted risk assessments and stakeholder audits across 30+ B2B SaaS engagements, helping reduce user-reported errors and support volume by an estimated 35%.

My work connects risk findings to practical remediation, from NIST CSF, ISO 27001, HIPAA, PCI DSS, and SOC 2 control mapping to policy lifecycle development and ServiceNow GRC data modeling. I believe unsafe behavior is a system design failure, not a human failure, and I build documentation that satisfies auditors and works for the people doing the job.

Experience

Work history, roles, and key accomplishments

SE
Current

Independent Consultant

Self-Employed

Jan 2020 - Present (6 years 8 months)

Conducted risk assessments and stakeholder audits across 30+ B2B SaaS client engagements, applying Fine-Kinney risk scoring and Five Whys root cause analysis. Reduced user-reported errors and support volume by an estimated 35% by translating risk findings into remediation plans.

Point B logoPB

Associate UI/UX Designer

Aug 2021 - Oct 2022 (1 year 2 months)

Led process assessments and workflow risk analysis on an employee training platform. Facilitated stakeholder workshops with 8 cross-functional teams to map workflows and prioritize remediation.

United Way of San Diego County logoUC

Program Assessment Associate

United Way of San Diego County

Jan 2018 - Jan 2019 (1 year)

Conducted 80+ stakeholder interviews and 100+ program assessments to inform data-driven funding and outreach decisions.

Unilever Bramalea logoUB

Occupational Health, Safety & Risk Manager

Jan 2008 - Jan 2015 (7 years)

Owned safety and regulatory risk governance for a 270-employee edibles manufacturing plant, reducing monthly incident investigations from 3 to 1 and contributing to 14 consecutive quarters without a major regulatory citation. Authored and maintained the plant's incident response plan and 8 critical task procedures.

TS

Occupational Health, Safety & Risk Manager

Tucker Energy Services

Jan 2003 - Jan 2004 (1 year)

Conducted monthly HSE audits across 2 rotating oil rig sites, plus a quarterly cross-functional audit with supervisors and union representatives. Authored or revised 15 critical task procedures and delivered monthly toolbox-talk safety training to approximately 110 employees.

Education

Degrees, certifications, and relevant coursework

University of Toronto logoUT

University of Toronto

Bachelor of Arts, Sociology and Equity Studies

Earned an Honors Bachelor of Arts in Sociology and Equity Studies from the University of Toronto.

Tech stack

Software and tools used professionally

Get matched with your dream remote job

Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!

Sign up
Himalayas profile for an example user named Frankie Sullivan