Looking for a job

Patricia Hernandez

@nicolehp

Message

IT Risk & Governance consultant focused on compliance, ITGCs, and operational resilience.

Spain

Message

What I'm looking for

I am seeking roles where I can drive IT risk management and GRC programs, collaborate cross-functionally, support audits, and enhance operational resilience within regulated, international organizations.

I am an IT Risk & Governance professional with 3+ years' experience in technology risk management, internal control validation, and regulatory compliance across global enterprise environments. I have conducted IT risk assessments and ITGC evaluations covering IAM, encryption, vulnerability management, and application security, aligned with ISO 27001, SOC 2 Type II, GDPR, PCI-DSS and EU regulations such as NIS2 and DORA.

I contribute to DORA-aligned ICT risk management and operational resilience initiatives, manage risk registers and remediation tracking, and support internal and external audit engagements with structured evidence packages. I translate regulatory requirements into practical, risk-based recommendations for engineering and product teams while balancing compliance and operational feasibility.

Experience

Work history, roles, and key accomplishments

Current

Governance, Risk & Compliance Analyst

Current

Schneider Electric

Oct 2023 - Present (2 years 5 months)

Conducted RCSA-style IT risk assessments across 200+ digital assets and third-party integrations, identified control gaps and regulatory impact, and supported DORA-aligned ICT risk and operational resilience initiatives. Managed risk registers, coordinated remediation and acceptance with owners, and prepared evidence packages to support internal and external audits.

IT Risk Management Third Party Risk Management ISO 27001 DORA Risk Register Audit Evidence

Digital Certification Intern

Schneider Electric

May 2022 - Feb 2023 (9 months)

Supported cybersecurity and privacy certification activities, contributing to control validation and documentation to improve compliance posture across digital services. Assisted with evidence collection and privacy alignment tasks to maintain certification readiness.

Cybersecurity Privacy ISO 27001 Certification Microsoft 365 Confluence

Junior Industrial Engineer

Utexa

Jul 2021 - Oct 2021 (3 months)

Performed industrial engineering tasks to support manufacturing operations, contributing to process improvements and operational efficiency during tenure. Collaborated with cross-functional teams to implement production optimizations.

Process Improvement Industrial Engineering Data Analysis Cross Functional Collaboration Continuous Improvement