Looking for a job

Sophie Uwu

@sophieuwu

Message

GRC Analyst at ROVUST, strengthening enterprise risk and compliance programs across cloud environments.

United States

Message

At ROVUST, I lead enterprise GRC program operations aligned with COBIT 2019, NIST CSF, ISO 27001/27002, and COSO ERM. I maintain the enterprise risk register and facilitate quarterly Risk & Control Self-Assessments with business units.

At Mastercard, I planned and executed IT audits covering ITGC and ITAC, including SOX testing and cybersecurity controls. Earlier, at JP Morgan, I assessed internal controls over financial reporting and tracked remediation through retesting.

Experience

Work history, roles, and key accomplishments

Current

GRC Analyst

Current

Rovust

Dec 2024 - Present (1 year 10 months)

Lead enterprise GRC program operations aligned with COBIT 2019, NIST CSF, ISO 27001/27002, and COSO ERM. Manage third-party risk assessments, maintain the enterprise risk register, and prepare executive-level GRC dashboards.

GRC COBIT2019 NIST CSF ISO 27001 ISO 27002 COSO ISO 31000 RCSA Third Party Risk Management SOC 1 SOC2 Power BI ServiceNow GRC AWS Azure CIS Benchmarks NIST SP 800 53

IT Auditor

Mastercard

Jan 2022 - Nov 2024 (2 years 10 months)

Planned and executed end-to-end IT audit engagements covering IT General Controls and IT Application Controls. Conducted SOX 302/404 ITGC testing and assessed cybersecurity controls aligned to NIST CSF and ISO 27001.

IT Audit ITGC ITAC SOX 302 SOX 404 NIST CSF ISO 27001 Vulnerability Management Privileged Access Patch Management SOC 1 SOC2 AuditBoard Workiva

Internal Controls Analyst

JP Morgan

Mar 2020 - Dec 2021 (1 year 9 months)

Designed and maintained the internal controls framework using COSO Internal Control Integrated Framework. Performed SOX 302/404 assessments, conducted risk and control self-assessments, and coordinated with external auditors.