Bush Waylon J.

Cybersecurity GRC & Risk Analyst with 10+ years of IT and cybersecurity experience, specializing in security assessments, application risk, compliance, third-party risk, and security governance. I help organizations turn cybersecurity requirements into practical, structured, and auditable security outcomes. My experience includes: • Cybersecurity GRC and IT risk assessments • Application security and architecture assessments • Third-party/vendor security risk assessments • Security questionnaires and control assessments • Risk identification, findings, recommendations, and remediation tracking • Security controls and compliance mapping • SOC 2 / ISO 27001 evidence review and audit support • Secure SDLC and application security reviews • IAM, privileged access, authentication, encryption, vulnerability management, logging, incident response, API security, and backup controls • Security documentation, evidence validation, and audit-ready narratives • Risk registers, control matrices, assessment frameworks, and security governance documentation I also have a strong technical background in Microsoft Azure, Microsoft 365, Active Directory, Citrix, virtualization, networking, cloud services, and managed services, allowing me to bridge the gap between security governance and technical implementation. My approach is risk-based rather than checkbox-driven. I focus on understanding the business and technical environment, validating evidence, identifying meaningful control gaps, determining risk, and providing practical remediation recommendations. I'm particularly interested in projects involving: GRC • Cybersecurity Risk • Application Security • Third-Party Risk • Compliance • Security Assessments • Security Questionnaires • SOC 2 • ISO 27001 • NIST • Secure SDLC • IT Risk • Security Governance If you need someone who can understand both the security framework and the underlying technology, I can help.