Open to opportunities

Shanique Solomon

@shaniquesolomon

Message

Senior GRC and AI governance consultant driving audit-ready, responsible-AI risk programs.

United States

Message

What I'm looking for

I’m looking for a fully remote role where I can lead AI governance and responsible-AI risk, build NIST/EU-aligned GRC programs, manage third-party risk, and drive audit readiness through ServiceNow workflows and actionable remediation.

I’m a Senior GRC & AI Governance professional with 10 years of progressive experience owning risk assessment, compliance monitoring, and audit coordination across regulated environments. I’m now focused on AI governance and responsible-AI risk, building programs that convert findings into actionable remediation.

I build and administer GRC programs aligned to NIST CSF, ISO 27001, SOC 2, PCI DSS, and HIPAA, with recent hands-on work in the NIST AI RMF, EU AI Act, and ISO 42001. I manage ServiceNow GRC workflows, multi-framework control assessments, and the stakeholder coordination needed for audit readiness and compliance reporting.

I bring a digital-forensics foundation from 50+ cyber-fraud and digital-crime investigations, combining investigative precision with practical compliance-program execution. I embed governance, security, and privacy requirements into solution design, vendor evaluation, deployment approval, and post-implementation monitoring.

Experience

Work history, roles, and key accomplishments

Current

AI Governance & GRC Consultant

Current

Synura AI Solutions

May 2023 - Present (3 years 3 months)

Built and administered 20+ GRC programs for AI-enabled automation solutions, aligning governance policies and control standards to NIST CSF, ISO 27001, SOC 2, and data-privacy requirements. Led audit readiness, including control evidence coordination, access reviews, and executive risk reporting, while managing third-party vendor risk and remediation tracking.

Compliance Specialist

Yeshiva University

Dec 2021 - Dec 2022 (1 year)

Validated endpoint security configurations against institutional baselines, documented exceptions, and drove remediation with IT. Administered Active Directory provisioning/deprovisioning for 500+ users and supported access reviews, compliance records, and security-awareness training.

Endpoint Security Security Baselines Exception Management remediation Active Directory Least Privilege ServiceNow Security Awareness Training

Cyber-Fraud Compliance Investigator

Ministry of National Security

Jan 2018 - Dec 2021 (3 years 11 months)

Conducted 50+ cyber-fraud and digital-crime investigations by analyzing logs, network activity, and digital evidence while maintaining chain of custody. Developed SOPs for digital evidence handling and performed root-cause analysis to inform prioritized policy, process, and control improvements.

Digital Forensics Chain Of Custody Log Analysis Network Analysis Root Cause Analysis SOP Development Investigative Reporting Wireshark Nmap

Cybersecurity Analyst

Cost Club Limited

Jan 2015 - Dec 2017 (2 years 11 months)

Monitored security events across four locations using Splunk, correlating POS, server, and endpoint activity to escalate unauthorized access and anomalies. Managed Active Directory access controls and least-privilege reviews for PCI-DSS cardholder systems and implemented system hardening and configuration baselines.

Splunk Security Events Least Privilege PCI DSS System Hardening Configuration Baseline Endpoint Security Unauthorized Access Detection