Open to opportunities

Trevon Keene

@trevonkeene

Message

I am a senior IT GRC analyst driving compliance and audit readiness

United States

Message

What I'm looking for

I’m seeking a senior IT GRC role where I can lead audits and compliance programs, drive FedRAMP/cloud readiness, mentor teams, and implement process improvements within mission-driven organizations focused on continuous security improvement.

I am a results-driven IT GRC Compliance Analyst with over 8 years' experience leading IT risk assessments, compliance reviews, and audits across federal and commercial sectors. I have led nearly 30 SOC 2 Type 2 audits, delivered ISO 27001 certification engagements, and managed FedRAMP readiness assessments, aligning security programs with business objectives.

I hold CISA, ISO 27001 Lead Auditor, CSM, and CCSK certifications and maintain an active Secret clearance. I excel at bridging technical and governance functions, implementing process improvements, mentoring teams, and driving audit readiness using GRC tools such as Archer and OneTrust.

Experience

Work history, roles, and key accomplishments

Current

Senior IT GRC Analyst

Current

CACI

Jun 2024 - Present (1 year 2 months)

Lead analysis, design, and implementation of business and system process improvements across Defense Logistics Agency initiatives while configuring COTS applications (SAP, Oracle, Momentum) and mentoring junior staff.

GRC Process Improvement SAP Oracle Stakeholder Engagement Project Management Automation)

Senior IT Auditor

Schellman & Company

Aug 2020 - Apr 2024 (3 years 8 months)

Led nearly 30 SOC 2 Type 2 engagements and directed full-cycle audits across SOC, FedRAMP, ISO 27001, HIPAA, and NIST frameworks, improving audit transparency and continuous compliance monitoring.

SOC ISO 27001 FedRAMP NIST 800 53 Monitoring Risk Assessment

Senior IT Auditor

Ernst & Young

Dec 2018 - Nov 2020 (1 year 11 months)

Delivered FISMA, FedRAMP, SOC, and NIST-based IT audit and advisory services for federal clients (including DISA and HHS), performing readiness assessments and authoring SSPs and SARs.

FISMA FedRAMP NIST IT Audit SSP SARs

Associate IT Business Analyst

CliftonLarsonAllen

May 2017 - Nov 2018 (1 year 6 months)

Supported IT audits for FISCAM, FISMA, SOX, and SSAE 18 frameworks, testing IT general and application controls and delivering compliance improvement recommendations.

ITGC IT Application Controls FISCAM SOX Compliance Testing