Grace Montenegro

I'm an IT Auditor with a solid foundation in supporting and auditing secure environments, particularly under ISO 27001 frameworks. My experience includes contributing to recertification efforts, conducting internal audits, and performing access reviews. Currently, I am deepening my knowledge in SOC 2 and other compliance frameworks, driven by a strong motivation to grow in IT audit and governance roles.

In my role at Stack Builders, I have successfully driven security initiatives that resulted in a measurable reduction in yearly non-conformities, significantly strengthening the company’s compliance posture. I led IT and support initiatives that automated workflows, reducing manual endpoint configuration by 70%. My strong communication and collaboration skills enable me to work effectively with cross-functional teams, translating complex issues into actionable items with a continuous improvement mindset.

My technical expertise includes vulnerability tracking and remediation in cloud environments, where I improved yearly resolution time by 20%. I have also performed web application security audits, identifying vulnerabilities aligned with the OWASP Top 10, which enhanced our security posture and contributed to ISO 27001 compliance. I am committed to leveraging my skills and knowledge to further advance in the field of IT audit and governance.