· Collaborated with senior security analysts to support control assessments against NIST CSF and ISO 27001 standards, contributing to the organization’s annual cyber risk review. · Participated in the completion of third-party security assessments, assisting with due diligence reviews, documenting responses, and flagging non-compliance or risks for escalation. · Managed a tracking log of open risk issues in ServiceNow IRM, validating remediation timelines, and coordinating with control owners for updates and documentation closure. · Assisted with internal audits by compiling control evidence (e.g., access reviews, logs, policy compliance), verifying with stakeholders, and preparing walkthrough documentation. · Reviewed and updated information security policies, ensuring version control and internal distribution through SharePoint and Confluence. · Supported data classification exercises and participated in gap analysis for aligning critical assets with appropriate security controls. · Generated weekly dashboards on policy exceptions, risk acceptances, and control effectiveness using Excel and Power BI.
Google Cybersecurity
Coursera
2024