Nate Jackson

I’m a Governance, Risk, and Compliance (GRC) and Cyber Risk professional supporting audits, control testing, and compliance initiatives in regulated environments. I align operational processes with NIST 800-53, ISO 27001, SOC 2, HIPAA, and SOX to turn regulatory requirements into practical, audit-ready controls.

In my roles at Labcorp and the University of Virginia, I’ve identified control gaps, supported remediation, and collected evidence across multiple audit cycles—improving audit readiness and reducing repeat findings. I’ve also partnered with Quality, Risk, and Compliance stakeholders to strengthen reporting accuracy and inspection preparation, and I’ve contributed to updating Standard Operating Procedures (SOPs) to improve process consistency.

I bring a strong foundation in incident response concepts, security monitoring, and risk reporting, with developing hands-on expertise in SIEM tooling and GRC platforms. Through projects like a NIST 800-53/ISO 27001 risk assessment, an incident response playbook aligned to NIST CSF Respond and Recover, and HIPAA-aligned policy development, I focus on measurable risk reduction, clear documentation, and continuous improvement.