Garrett C.
Mechanicsburg, PA · Information Security GRC Manager · e&e IT Consulting Services Inc.
About
Governance, Risk, and Compliance (GRC) Manager with over 12 years of experience leading enterprise information security initiatives across government and private sectors. Expert in audit management, regulatory compliance, and risk assessments, with a proven trackable record of aligning security frameworks like NIST and PCI DSS to business objectives. Skilled in advising executive leadership and managing cross-functional teams to improve enterprise security posture.
Skills
- GRC Program Development & Management
- IT Audit
- Regulatory Compliance (PCI DSS, IRS, CMS, SSA, GAAP)
- Risk Assessment & Remediation Planning
- Security Policy, Standards & Procedures Development
- NIST
- COBIT
- ISO 27001
- Data Privacy
- Security Assessments
18 skills in total
Experience
-
Information Security GRC Manager
e&e IT Consulting Services Inc.
Jan 2016 — Present
Mechanicsburg, PA
-
Information Security Analyst / Solution Engineer
Deloitte & Touche, LLC
Jan 2013 — Jan 2016
-
Network Operations Analyst
IBM
Jan 2011 — Jan 2013
4 experiences in total