Prince Anyanwu

Led enterprise GRC program operations, managing compliance assessments, audit readiness, and control documentation aligned to NIST, SOC 2, ISO 27001, and HIPAA. Managed third-party vendor risk assessments, coordinated audit evidence collection, and provided executive-level reporting on GRC program health and risk trends.

Managed enterprise GRC operations across SOC 2, SOX, ISO 27001, PCI DSS, and HIPAA, serving as the primary liaison with external auditors. Conducted risk assessments and vendor evaluations, oversaw ITGC testing, maintained risk/control tracking artifacts, and supported HIPAA activities including user access reviews and segregation of duties analysis.

Executed risk-based IT and operational audits, including planning, walkthroughs, control testing, and documentation in a highly regulated financial services environment. Evaluated control design and operating effectiveness, performed root cause analysis, and coordinated remediation validation with governance stakeholders.

Supported KYC/AML governance and compliance by reviewing due diligence documentation and validating adherence to internal policies and regulatory requirements. Coordinated with compliance, legal, and risk teams to resolve documentation gaps and address identified risk issues.

Performed SOX and ITGC testing, including walkthroughs, sampling, evidence validation, and documentation of IT-dependent controls supporting financial reporting. Evaluated control design and operating effectiveness, tracked deficiencies through remediation, and prepared audit workpapers and evidence packages for internal and external review.

Earned a B.S. in Accounting from Syracuse University's Martin J. Whitman School of Management.