I am an experienced Information Security Analyst with a strong background in Governance, Risk, and Compliance. I specialize in implementing and auditing frameworks like ISO/IEC 27001/2, GDPR, NDPR, NIST, PCI DSS, SOC 2, HIPAA, and HITRUST. My expertise includes ISMS implementation, risk assessments, internal audits, and third-party risk management.
I also have hands-on experience with vulnerability management, identity and access management, and developing security policies. I’ve worked closely with SOC teams to monitor threats and ensure timely incident response. I’m passionate about staying current with emerging cybersecurity trends and applying best practices to protect organizational assets. I thrive in collaborative environments and enjoy solving complex security challenges.