Open to opportunities

Victoria Roach

@victoriaroach

Message

I build proactive operational and technology risk controls that prevent compliance failures.

United States

Message

What I'm looking for

I'm looking to build proactive, first-line operational and technology risk controls, using data monitoring, vendor governance, and AI risk frameworks to prevent issues before they reach downstream lines of defense.

I've built proactive operational and technology risk controls across Yelp, KPMG, USDA, and The JJ Center. At Yelp, I designed risk and control matrices, governed vendor risk, and led remediation for a data-integrity gap that averted a potential seven-figure regulatory penalty.

I'm now building first-line risk architecture through automated LLM data pipelines, GenAI routing, segregation-of-duties controls, and HIPAA-aligned privacy operations. My work combines SQL-based validation, audit readiness, policy governance, and practical control design that moves risk management into day-to-day operations.

Experience

Work history, roles, and key accomplishments

Current

Board Member & Operational Risk Lead

Current

The JJ Center Inc.

Dec 2024 - Present (1 year 9 months)

Designed and engineered an automated LLM data pipeline, GenAI routing agent, and Segregation of Duties controls. Authored and implemented a HIPAA-aligned data privacy framework and automated CAN-SPAM audit trails.

Gemini Claude AI Google Apps Script GitHub AI ML Governance HIPAA CAN SPAM Data Privacy Compliance Automation

Senior Internal Auditor

Yelp, Inc.

Aug 2022 - Sep 2024 (2 years 1 month)

Partnered with operations to run gap assessments, embed risk and control matrices, and govern third-party vendor risk. Identified a critical data integrity gap in a CAN-SPAM compliance dataset and led remediation, preventing a potential seven-figure regulatory penalty.

Risk And Control Matrices Vendor Risk Management SOC Report Review ITGC SQL CAN SPAM Data Integrity Training Audit Gap Analysis

Sr. Associate Advisory, Technology Risk Management

KPMG, LLP

Oct 2018 - Aug 2022 (3 years 10 months)

Architected corporate risk and control frameworks for major pre-IPO and public tech workstreams, embedding controls and third-party risk mapping into cloud and supply chain environments. Managed multiple client engagements including budget planning, hour tracking, and invoice preparation.

COSO NIST Third Party Risk Management Cloud Security AWS Azure SOC 1 SOC 2 Risk Frameworks Budget Planning Client Advisory Risk Reporting

Auditor, Global IT

Universal Music Group

Nov 2017 - Jul 2018 (8 months)

Managed IT audit coverage across six international territories and trained overseas teams on consistent testing methodology.

IT Audit Audit Testing Methodologies team training

Management Analyst

U.S. Department of Agriculture

Jun 2014 - Aug 2016 (2 years 2 months)

Audited over $1B in federal grants, contracts, purchase card, and fleet programs, identifying data anomalies that led to fund recovery. Analyzed Federal Acquisition Regulations to modernize agency Suspension and Debarment policy.