Open to opportunities

Pamela Akumabor

@pamelaakumabor

Message

GRC and IT audit professional specializing in risk, compliance, and AI governance.

United States

Message

What I'm looking for

I’m seeking roles focused on GRC, vendor risk, or IT audit where I can lead risk assessments, strengthen compliance programs, and integrate AI governance within collaborative, regulated environments.

I am a GRC and IT audit professional with over eight years of experience strengthening risk, compliance, and security governance across regulated industries. I translate complex technical and regulatory risks into clear, actionable guidance for IT, Legal, Procurement, and executive leadership.

In my current role I execute IT and security risk assessments aligned with ISO 27001/27002 and NIST 800-53, lead third-party vendor risk assessments, and maintain RMF artifacts to keep environments audit-ready. I have identified numerous control gaps and driven remediation through structured reporting and stakeholder accountability.

I have a proven track record in ITGC and SOX testing, SOC 1/SOC 2 report reviews, vendor due diligence, and data privacy assessments covering HIPAA, CCPA/CPRA, GDPR, and cross-border transfer mechanisms. I also support AI governance integration, evaluating third-party AI vendor risk, model governance, and alignment with NIST AI RMF principles.

I hold CISA and CRISC certifications and bring practical experience from IT support through senior audit and GRC specialist roles, combining hands-on technical knowledge with audit rigor to improve control effectiveness and compliance posture.

Experience

Work history, roles, and key accomplishments

Current

GRC Specialist

Current

Mac Jason Consult

Jan 2023 - Present (3 years 1 month)

Execute IT and security risk assessments aligned with ISO 27001 and NIST 800-53 across 12+ enterprise systems, identifying 30+ control gaps and driving remediation; lead vendor risk assessments for 25+ critical vendors and scale GRC tooling and SOC 2 programs.

GRC Vendor Risk Management ISO 27001 NIST 800 53 SOC Risk Assessment Policy Development Incident Response

IT Auditor

Clinical Trial Investigate

Nov 2017 - Dec 2022 (5 years 1 month)

Planned and executed risk-based IT audits of clinical trial systems and GxP environments, identified 20+ control gaps and implemented recommendations that reduced repeat findings by 35% while supporting SOC report reviews and privacy compliance.

IT Audit ITGC SOX Compliance HIPAA SOC Risk Assessment FDA 21 CFR Part 11 Audit Reporting

IT Support Analyst II

Benchmark Technical Services

Sep 2012 - Aug 2017 (4 years 11 months)

Provided Tier 2 support and managed Active Directory provisioning and group policies for 200+ endpoints, improving resolution times by 25% and strengthening baseline security configurations and access controls.

Active Directory Windows Administration Access Management Patch Management ITSM Troubleshooting Security Awareness

Education

Degrees, certifications, and relevant coursework

City, University of London

Master of Arts, International Communications & Development

Completed a Master of Arts in International Communications & Development, focusing on communication strategies and development policy in international contexts.