Jeremy Fluker

I’m a GRC Analyst focused on turning risk management into measurable audit readiness. I’ve supported control testing, third-party risk assessments, IT auditing, compliance documentation, and executive reporting aligned to NIST CSF, PCI DSS, ISO 27001, and CMMC.

In my current Azure-focused work, I secure access and harden environments using RBAC, least privilege, and Zero Trust controls in Microsoft Entra ID. I’ve also implemented SSH keypair access controls for Azure Virtual Machines and tightened cloud exposure with NSG rule sets and streamlined access provisioning/deprovisioning workflows.

Previously, I helped drive compliance and risk outcomes in payments and apps by finding and documenting 10+ security weaknesses using CVSS scoring, and maintaining policies and procedures used as audit evidence. I also bring hands-on incident readiness experience from IT support—scanning endpoints, remediating threats, and documenting an attempted ransomware incident to strengthen response and audit traceability.