Yedah Camay

I’m an IT Security AnalystIII with 8+ years of experience leading information security, compliance auditing, third-party risk management, and governance, risk, and compliance (GRC) across multinational organizations. At SealedAir, I lead third-party security assessments, maintain the enterprise IT risk register, and partner with cross-functional stakeholders to strengthen organizational security posture and risk management practices.

I focus on turning control expectations into measurable outcomes. I conduct security and compliance assessments aligned with ISO27001/27002, SOC2, and regulatory frameworks such as FTC, GDPR, FCRA, and HIPAA—identifying control gaps, evaluating IT controls, assessing vendor risks, and recommending remediation strategies to improve security and regulatory compliance.

In my role as an Information Security Compliance Senior Auditor at Reed Elsevier, I performed information security assessments and internal testing aligned with ISO27002-2013 for FTC compliance. I executed test plans, analyzed IT controls (including user access, logs, and configurations), documented findings to evaluate operational, security, and regulatory risks, and collaborated with control owners through interviews and reviews of applications, networks, SDLC, and compliance frameworks.

I’m also experienced integrating risk and compliance into the way teams deliver technology. I worked with internal audit management to integrate continuous auditing technologies into IT projects, identified control gaps, recommended process improvements, and communicated findings to senior leadership. I bring a disciplined, evidence-based approach—and certifications including CISA and CISM—to help organizations reduce risk, improve controls, and sustain compliance.