Rockynson Garraud

Drafted Assessment Procedure Guidelines for critical vendors and reviewed information security policies, integrating enhancements for ongoing and new assessments. Defined Security Control Questionnaires and established requirements for critical vendors, leveraging internal policies and industry standards.

Facilitated assessment processes using RSA Archer and documented findings and artifacts within the system. Supported transaction data migration with SAP BODS, LSMW, Migration Cockpit, and SAP Information Steward, ensuring data integrity and security.

Worked with vendors to ensure adequate tiering based on data access levels and administered questionnaires to determine control effectiveness. Conducted onsite and virtual risk assessments to continuously determine the security posture at vendor sites.

Administered assessment questionnaires to vendors and performed continuous monitoring during onsite visits to validate security questionnaires. Conducted on-site risk assessments based on agreed-upon procedure guidelines and reviewed critical vendor-provided documentation.

Performed audits of IT general and application controls, information security, and systems development. Led the integrity and adherence of the financial and management reporting process, ensuring compliance with SOX and client-specific requirements.

Completed a Bachelor of Science degree in Information Technology. Gained foundational knowledge in IT principles and practices.

Completed a Bachelor of Arts degree in Business Management. Developed skills in business operations, management principles, and organizational strategies.