Open to opportunities

Fritz Nkwenchi

@fritznkwenchi

I am an experienced GRC specialist in information security, risk management, and compliance, driving governance and control effectiveness.

United States

Message

What I'm looking for

I seek a collaborative, metrics-driven role in GRC or cybersecurity compliance where I can mature programs, lead control validation, automate reporting, and drive measurable risk reduction.

I have over 7 years of experience in governance, risk and compliance, specializing in development and maintenance of information security policies, standards, and control validation across frameworks such as ISO 27001, NIST CSF, PCI DSS, GDPR, ISO/SAE 21434 and UN R155. I built a consolidated control framework and implemented a metrics-based reporting system to improve transparency and tracking.

My background includes managing third-party risk programs, automating compliance questionnaires and reporting (reducing manual effort by 40%), and improving compliance tracking and audit efficiency. I hold CRISC and GRCP/GRCA certifications, am completing CISM, and I seek opportunities to strengthen governance, mature risk programs, and drive measurable compliance improvements.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Compliance Specialist

Current

Mynexuscare

Aug 2021 - Present (4 years 1 month)

Conducted compliance audits for ISO/SAE 21434 and UN R155, developed a consolidated control framework to streamline multi-standard compliance, and implemented metrics-based reporting to improve governance transparency.

ISO 21434 UN R155 ISO 27001 NIST CSF Policy Development Risk Management Auditing

TPRM Specialist

Wesley Financial Group

Jul 2019 - Jul 2021 (2 years)

Managed the third-party risk management program and lifecycle, conducted vendor risk assessments and compliance reviews, improved compliance tracking by 20% and automated questionnaires and reporting to reduce manual effort by 40%.

Third Party Risk Management Vendor Assessment ISO 27001 NIST CSF Audit Support Risk Mitigation Governance Process Automation

IT Risk & Compliance Auditor

WhaleWisdoms / Match

Jan 2016 - Jun 2019 (3 years 5 months)

Conducted IT audits, risk assessments, and internal control evaluations, standardized governance documentation and supported BCP/DR efforts, contributing to a 15% reduction in audit time.

IT Audit Internal Controls Business Continuity Policy Development Audit Reporting Governance