Open to opportunities

Lou Gb

@lougb

Message

GRC & third-party risk analyst improving audit readiness and control effectiveness.

Canada

Message

What I'm looking for

I’m looking to grow in GRC and third-party risk, supporting audit-ready documentation, internal control testing, and regulatory compliance through strong vendor due diligence and cross-functional collaboration.

I’m a GRC Analyst with 4+ years of experience across governance, risk management, compliance, and third-party risk management in operational and vendor environments. I conduct risk assessments, evaluate internal controls, and support audit readiness and regulatory compliance in fast-paced organizations.

I’m skilled in ServiceNow GRC and SharePoint-based control documentation, with working knowledge of ISO/IEC 27001 and the NIST Cybersecurity Framework (CSF). In my roles, I lead GRC and TPRM activities, manage compliance and audit documentation, perform vendor due diligence across 20+ vendors, and collaborate cross-functionally to close control gaps and strengthen compliance processes.

Experience

Work history, roles, and key accomplishments

Current

GRC/TPRM Analyst

Current

Christian Life Center

Aug 2024 - Present (1 year 11 months)

Led governance, risk, and compliance (GRC) activities to support internal policy enforcement and operational risk oversight. Conducted operational risk assessments, identified control gaps, tracked risk remediation closure, and supported audit-ready compliance reporting.

Governance Risk & Compliance (GRC)Third Party Risk Management (TPRM)Operational Risk Control Gap Remediation Compliance Reporting Audit Readiness Stakeholder Management Policy Enforcement

Junior GRC/Vendor Risk Analyst

El’Nino Synergy Ltd.

Jul 2021 - Jul 2024 (3 years)

Executed end-to-end third-party risk management (TPRM) activities, including vendor onboarding, risk documentation review, and compliance validation. Performed vendor due diligence across 20+ vendors and supported audit readiness through complete, accurate, and consistent vendor risk documentation.

Third Party Risk Management (TPRM)Vendor Onboarding Due Diligence Documentation Review Validation Data Integrity Risk Mitigation Audit Readiness

GRC Support Analyst (Client Operations)

Odak Motors

Mar 2019 - May 2021 (2 years 2 months)

Maintained and validated client and transactional data in line with internal frameworks and policies. Supported compliance of financial documentation processes to ensure accuracy and audit readiness while protecting sensitive client data and resolving data inconsistencies.

Financial Documentation Audit Readiness Data Inconsistency Resolution Internal Policies