Looking for a job

Ebi Orellana

@ebiorellana

Message

Experienced GRC and Security-Risk Analyst with a focus on compliance.

United States

Message

What I'm looking for

I seek a role that fosters collaboration, innovation, and continuous learning in cybersecurity.

I am a seasoned Governance, Risk, and Compliance (GRC) and Security-Risk Analyst with over 12 years of experience in architecting and executing strategic solutions that ensure regulatory adherence and bolster organizational resilience. My expertise encompasses comprehensive security assessments, risk analyses, and rigorous audits, enabling me to pinpoint vulnerabilities and deploy robust IT security frameworks, policies, and controls.

Throughout my career, I have successfully developed and maintained comprehensive IT GRC strategies, leading to significant reductions in security risks and improvements in compliance levels. I have a proven track record of collaborating with cross-functional teams to conduct risk assessments, compliance audits, and security incident responses, resulting in enhanced organizational security and a culture of compliance. My passion lies in managing large-scale security and risk management programs, focusing on safeguarding critical assets and ensuring continuous improvement in regulatory compliance and risk mitigation strategies.

Experience

Work history, roles, and key accomplishments

Current

GRC and Security-Risk Analyst

Current

Willis Towers Watson

Jun 2023 - Jan 2025 (1 year 7 months)

Developed and maintained comprehensive IT GRC strategies, achieving a 25% reduction in security risks and a 30% improvement in compliance levels. Proactively identified and mitigated 95% of potential security threats, ensuring organizational asset protection.

Governance Risk Management Security Policies Incident Response Risk Assessment Data Governance Cross Functional Collaboration Vulnerability Management

IT Security-Risk and Compliance Analyst

Intel

Jun 2022 - Jun 2023 (1 year)

Collaborated with cross-functional teams to integrate risk mitigation strategies and managed compliance documentation, reducing audit preparation time by 30%. Conducted risk assessments and developed IT security policies aligned with industry standards.

Risk Mitigation Compliance Security Policies Incident Response Cross Functional Collaboration Risk Assessment Security Best Practices

Third Party Information Security Analyst

Micron Technology

Jan 2020 - May 2022 (2 years 4 months)

Managed third-party vendor risk assessments and coordinated risk evaluations for external partners. Supported the development of risk management programs and conducted audits to ensure compliance with security standards.

Vendor Risk Management Risk Management Security Policies Data Security Risk Assessment Incident Response Compliance

Cybersecurity GRC & TPRM Analyst

Wells Fargo

Mar 2018 - Jan 2020 (1 year 10 months)

Managed third-party risk through the TPRM framework and conducted risk assessments on vendors. Collaborated with teams to monitor cybersecurity controls and prepared risk reports for executive leadership.

Third Party Risk Management Risk Assessment Compliance Reporting Risk Mitigation Cross Functional Collaboration Security Policies Regulatory Compliance

Jr. System Administrator

Teletech, TTEC

Jan 2016 - Mar 2018 (2 years 2 months)

Managed and maintained internal systems and networks, providing technical support and ensuring optimal performance. Implemented system backups and recovery procedures, achieving 99.9% data integrity.

System Administration Technical Support Network Management Backup Procedures Active Directory Systems Performance Troubleshooting Documentation Infrastructure Management

IT Risk Management Analyst

Adecco

Apr 2013 - Dec 2015 (2 years 8 months)

Conducted comprehensive risk assessments and developed security controls, achieving a 25% reduction in security incidents. Collaborated with teams to implement risk mitigation strategies and manage vulnerability programs.

Risk Assessment Incident Reduction Vulnerability Management Risk Mitigation Cross Functional Collaboration Security Policies