GRC, IT Risk & Security Compliance

Principal Consultant

Independent Consulting Practice

• Assess cybersecurity, privacy, and technology-risk issues for regulated and high-risk organizations and translate findings into governance, control, and remediation work.
• Conduct risk assessments and translate findings into prioritized remediation actions, implementation roadmaps, and measurable controls.

Innovation and Transformation Consultant

Designation: Chief Information Technology Officer

• Assessed cybersecurity, technology-risk, and information-security issues and advised on control implementation and critical-infrastructure protection.
• Supported risk assessments and the development of controls addressing identified cybersecurity and information-security risks.

Information Technology Officer III

Designation: Chief, Compliance and Monitoring Division

• Led compliance monitoring, breach-notification processing, registration, compliance support, and regulatory reporting operations.
• Conducted and oversaw privacy, security, technology, and compliance assessments across high-volume operational workflows.

Director of Operations

Additional functions: Head, Legal and Compliance; Designated Data Protection Officer

• Established the organization’s first Privacy Management Program, including privacy governance, policies, security procedures, data-handling standards, employee training, and accountability controls.
• Conducted privacy and operational risk assessments and translated findings into corrective actions and improved data-governance practices.

Corporate Counsel

Additional functions: Facilities Manager; Head, Information Technology

• Planned IT and information-security improvements and digitalized corporate records to protect confidential organizational information.
• Coordinated technology vendors, contracts, regulatory requirements, and implementation activities involving confidential organizational information.