Experienced GRC Analyst proficient in regulatory compliance frameworks (GDPR, HIPAA, SOX) and IT Security Frameworks (ISO27001, GLBA, NIST, CIS Control, PCI-DSS). Skilled in maintaining up-to-date knowledge on legal and regulatory requirements, utilizing GRC tools like OneTrust and KnowBe4. Expert in conducting risk assessments, facilitating vendor reviews, and maintaining compliance systems. Proven track record in enhancing compliance monitoring and implementing effective information security programs.