At General Electric, I supported SOX ITGC audits across access, change management, and operations, with no findings in the last 10 years. As the ServiceNow governance point of contact, I reviewed about 100 change tickets monthly and tracked identified gaps through remediation.
During GE Healthcare’s transition to third-party status, I led the standardization of privileged access and training requirements, reducing provisioning time to within 24 hours and required training by 70%. I also authored a CMMC control mapping accepted by compliance leadership and an external assessor, and led a server-to-application mapping project that reduced defects by 81%.
