Strategic and detail-driven Compliance & Risk Analyst with 8+ years of experience advancing enterprise risk management, GRC program maturity, audit readiness, and cybersecurity governance across highly regulated industries. Proven track record of strengthening internal controls, reducing risk exposure, enhancing compliance monitoring, and improving executive decision-making through data-driven reporting. Adept at aligning risk programs to frameworks including NIST 800-53, ISO 27001, SOC 1/2, PCI-DSS, GDPR, HIPAA, and HITRUST. Known for transforming complex risk data into actionable insights, driving remediation, and elevating organizational security posture.