Kenan Corbett

Led full-lifecycle IT and cybersecurity audits across incident response, data protection, device management, and third-party security, strengthening TPRM and presenting remediation status to Audit Committee. Directed ITGC evaluations aligned to SOX, NIST 800-53, and ISO 27001, driving risk-based remediation and control improvements.

Led enterprise-wide cyber risk and IT control assessments integrating NIST CSF, ISO 27001, and FFIEC guidance, produced executive risk reporting and dashboards, and implemented RCSA processes in ServiceNow GRC to improve control maturity. Delivered process improvements that reduced manual compliance effort and enabled continuous monitoring.

Performed 2LOD ITGC and application control testing focused on access, change management, and operations, assessed vendor cybersecurity controls and SOC reports, and strengthened SOX control design and audit readiness. Standardized control narratives and evidence repositories to improve audit efficiency.

Developed and implemented operational risk management frameworks and RCSA scopes, identified control risks, and established policies and procedures to standardize risk assessment and reporting. Re-scoped reviews to ensure validity and consistency across programs.

Completed a Bachelor of Science in Marketing with coursework supporting business and analytics fundamentals relevant to risk and governance roles.