Looking for a job

Lenehn Ricks

@lenehnricks

Cloud security analyst at SAP NS2 leading compliance audits and cloud control remediation across five environments.

At SAP NS2, I serve as a GRC subject matter expert across five cloud environments, implementing and tracking compliance with federal and global security frameworks.

I direct compliance audits from scoping and control validation through corrective action tracking. I also lead enterprise risk activities, including control gap analysis and POA&M remediation tracking.

At ADP Payroll Services, I orchestrated a new NIST Compliance Program, authoring more than 700 security controls with business units and control owners. I also assessed technology and business teams’ security controls and tracked audit findings and remediation.

Earlier, I led RMF assessment and authorization work at Credence Management Solutions and supported control testing at Capital One. At DelTaahTech Consulting, I supported federal security authorization activities and developed and updated information system security documentation.

Experience

Work history, roles, and key accomplishments

Current

Lead Cloud Security Analyst, GRC

Current

SAP NS2

Jan 2025 - Present (1 year 9 months)

Serve as GRC subject matter expert on federal and global governance standards, implementing and tracking compliance with security-related frameworks across 5 cloud environments. Direct federal and global compliance audits (SOC, SOX, PCI DSS, NIST, CMMC, ISO 27001) and lead enterprise risk management activities.

GRC NIST FISMA CMMC SOC SOX PCI DSS ISO 27001 Cloud Security Risk Management POA&M Jira Power BI Archer SNOW

Senior Associate, Cybersecurity Compliance

ADP Payroll Services

Jan 2024 - Jan 2025 (1 year)

Supported global security controls alignment, testing, implementation, and monitoring using knowledge of RMF, NIST, ISO, SOC and other cyber-related regulations. Orchestrated a new NIST Compliance Program, authoring 700+ security controls and performing risk assessments and control testing.

RMF NIST ISO SOC Security Controls Risk Assessment Control Testing Audit Management Stakeholder Engagement

Senior (I/A) Cybersecurity SME

Credence Management Solutions

Jan 2023 - Jan 2024 (1 year)

Led PMO execution of Risk Management Framework (RMF) Assessment and Authorization (A&A) steps, including assessment and continuous monitoring activities. Supported engineering teams with monitoring and validating security alerts, identifying threats, and determining remediation.

RMF A&A Vulnerability Management Penetration Testing SIEM DISA STIGs SRG Security Documentation Incident Response

Principal Associate, Cyber Controls, Risk, & Governance

Capital One

Jan 2021 - Jan 2023 (2 years)

Supported enterprise-wide cyber controls testing engagements using knowledge of RMF/NIST and federal cyber-related regulations. Performed risk assessments, designed and executed control testing procedures, and led small to medium sized testing engagements.

RMF NIST Risk Assessment Control Testing Cybersecurity Cloud Infrastructure Third Party Management Stakeholder Management

Security Control Assessor/Analyst

DelTaahTech Consulting

Jan 2016 - Jan 2021 (5 years)

Supported NIST Risk Management Framework (RMF) Assessment and Authorization (A&A)-based activities and provided guidance for all assigned Security Authorization activities. Developed and updated information system security documentation including SSP, POA&Ms, and other security plans.