Wesley C.

I design, strengthen, and operationalize Enterprise Risk Management (ERM) and Governance, Risk & Compliance (GRC) programs that reduce exposure, improve audit readiness, strengthen third-party risk oversight, and turn policy and control requirements into executable operating structures. I bring 15+ years of experience across enterprise risk management, compliance, audit, process improvement, and executive advisory, with experience supporting ISO 27001, NIST, SOC 2, HIPAA, GLBA, FedRAMP, DFARS, and related control environments. Core capabilities include: 1️⃣ Enterprise Risk Management 2️⃣ GRC program development 3️⃣ Risk assessments and risk registers 4️⃣ Policy, process, and control development 5️⃣ Internal audit and compliance readiness 6️⃣ Third-Party Risk Management 7️⃣ Executive risk reporting 8️⃣ Training and curriculum development Credentials include: 1️⃣ MBA — Master of Business Administration 2️⃣ GRCA — Governance, Risk and Compliance Auditor 3️⃣ GRCP — Governance, Risk and Compliance Professional 4️⃣ CTPRA — Certified Third Party Risk Assessor 5️⃣ LSSMBB — Lean Six Sigma Master Black Belt 6️⃣ ISO 27001 Lead Auditor I am typically engaged when an organization needs someone who can assess the problem, architect the framework, develop the documentation, and drive the solution into operation.