Nancy P.

About

Nancy P. is a GRC Lead with over 13 years of experience in developing and implementing governance frameworks, establishing enterprise risk management programs, and ensuring regulatory compliance across various standards including SOX, GDPR, HIPAA, ISO 27001, and PCI DSS. She has a proven track record of advising C-suite and Board members on risk and compliance, embedding risk-aware cultures, and aligning GRC initiatives with business strategies. Nancy has successfully built three enterprise GRC programs from scratch and achieved zero material weaknesses across more than 20 external audits.

Skills

• Governance Framework Development & Implementation
• Enterprise Risk Management (ERM) Program Leadership
• Regulatory Compliance (SOX, GDPR, HIPAA, ISO 27001, PCI DSS)
• Internal & External Audit Oversight
• Internal Control Design & Implementation
• Risk Assessment & Mitigation Strategy
• C-Suite & Board Risk Reporting
• KPI & Metrics Development
• GRC Platform Leadership (ServiceNow GRC, OneTrust)
• Policy Development & Lifecycle Management

18 skills in total

Experience

• PCI Governance Analyst

  TekSystems / Arvest Bank

  Apr 2026 — Present

  Remote

• Senior Security & Compliance Analyst

  Pamela Burks Cyber Security LLC

  Nov 2019 — Present

  Remote

• Senior PCI Compliance Analyst

  TekSystems / HanesBrands Inc.

  Feb 2023 — Oct 2023

  Remote

9 experiences in total

Education

• CISM Candidate

  CISM Candidate

  Q4 2026