Jennifer Asiedu

I’m a detail-oriented IT Audit, Risk, and Compliance professional who evaluates technology controls, identifies risks, and helps ensure compliance with regulatory frameworks. I perform end-to-end IT audits and IT General Controls (ITGCs), translating audit outcomes into clear, actionable next steps.

In my current role, I help monitor adherence to SOX, ISO 27001, NIST 800-53, PCI-DSS, and HIPAA by supporting policy, procedure, and control documentation. I conduct risk assessments, test controls, and build audit evidence packages while using GRC tools such as ServiceNow and RSA Archer to track risk and remediation activities.

I’m experienced in strengthening access governance by managing user access reviews and coordinating with IT teams on identity and access management compliance. I also support vendor risk assessments by reviewing SOC reports, compliance questionnaires, and documentation to support internal and external audit readiness.

Previously, I worked as a Third-Party Risk and Compliance Analyst, where I led comprehensive vendor risk assessments (including SOC 1 & SOC 2 reviews), maintained third-party risk registers, and followed remediation of control gaps and expired documentation. I bring precise documentation, strong analytical thinking, and discretion to every engagement, with a clear focus on reducing organizational risk through well-managed compliance and security practices.