At KPMG, I led third-party security risk assessments for enterprise clients across banking, healthcare, and life sciences, using client methodologies and the SIG framework. I also turned a backlog of more than 200 information security intake items into fewer than 20 outstanding items by building a risk-based prioritization framework and driving team execution.
I reviewed penetration test reports, SOC 2 Type 2 attestations, disaster recovery reports, and other compliance documentation to identify control and process gaps. I also produced audit-ready evidence packages and executive reporting to support client examination and audit cycles.
I helped enhance a homegrown third-party risk frameworkâs migration to ServiceNow by supporting workflow testing, requirements gathering, and future-state design. I also used AI tools to draft playbooks and standardize documentation, reviewing and validating the output before use.
Earlier at KPMG, I managed and developed a cross-functional team of assessors, providing training and coaching while establishing consistent assessment methods. At JCPenney, I managed a field response team and directed risk mitigation across a multi-store district.
