Shauna C.

Cyber GRC | Compliance Audits | Security Assessments | Technical Writing | vCISO | NIST | ISO | SOC 2 | COBIT | GDPR | HIPAA | CIS CSC | Project Management | Program Management I am a cyber security consultant, project manager, technical writer and educator specializing in governance, risk and compliance (GRC). I help build practical cybersecurity GRC programs that help organizations withstand audit scrutiny. My background includes working in organizations that span various industries and sectors including financial services, healthcare, IoT product development, government, and higher education. EXPERIENCE My experience includes a combination of cybersecurity, audit and assurance, IT operations, and project and program management. As a former auditor I understand what auditors, assessors, and regulators look for. As an IT leader, I understand the operational realities of implementing controls. I bring these perspectives together to help organizations reduce risk and produce deliverables rooted in reality. I am a Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Project Management Professional (PMP) and Certified Scrum Master (CSM). My track record includes building and enhancing information security programs aligned with frameworks, standards, and regulatory requirements such as NIST, ISO 27001 / 27002, SOC 2, COBIT, HIPAA, PCI DSS, CIS Controls, and GDPR. SERVICES - GRC Program Development and Enhancement - Cybersecurity & IT Risk Assessments - Project Management - Technical Writing (Policies, Standards, & Procedures) - IT Audit Advisory (Pre-audit Preparation, Post-Audit Remediation) - Security Awareness & Training CORE STRENGTHS - Provide clarity in environments characterized by ambiguity and complexity - Strategic & operational expertise enabling the implementation of effective solutions - Ability to substantiate risk and control decisions for executive leadership, auditors, regulators, and other stakeholders - Keen ability to effectively communicate and build consensus - Project management expertise enabling disciplined execution and quality output My goal is to produce exemplary results on each and every engagement.