J W

I am an information security risk manager with over nine years of experience in Governance, Risk, and Compliance (GRC), focused on building and running enterprise-wide risk programs aligned to NIST CSF and ISO 27001.

I have developed and implemented risk management frameworks, led comprehensive risk analyses, and produced executive-level summaries, KRIs, and dashboards to inform senior leadership. I manage risk registers and reporting functions using ERamba and drive remediation through the full mitigation lifecycle.

I ensure regulatory and standards alignment, including HIPAA, CCPA, and PCI-DSS, author internal policies and SOPs, and execute internal audit and ISMS processes such as data classification and incident response. I have supported audit readiness and the PDCA compliance cycle across global operations.

I partner with stakeholders across functions to prioritize risk, support risk-aware culture through training and communications, and guide risk decisions during M&A and third-party engagements. I hold ISO/IEC 27001 Lead Auditor certification and bring a results-driven, compliance-focused approach to security risk management.