Maxwell S.

U.S. Citizen · IT Risk & Compliance Manager · Deloitte & Touche LLP

About

Information Security and Risk Management leader with 11+ years across Big Four and public accounting, specializing in IT audit, third-party/vendor risk management, and Governance, Risk, and Compliance (GRC). Proven record designing and implementing IT controls and compliance programs aligned to SOX, NIST SP 800-53/171, ISO 27001, FedRAMP, CMMC, HIPAA, HITRUST, and PCI-DSS. CISM, CISA, and CompTIA Security+ certified with an active Secret clearance.

Skills

  • GRC
  • IT Audit
  • Third-Party Risk Management
  • SOX
  • NIST CSF
  • NIST SP 800-53/171/172
  • ISO 27001/27002
  • COSO
  • COBIT
  • FISMA

50 skills in total

Experience

  • IT Risk and Compliance Manager

    Deloitte & Touche LLP

    Jan 2023 — Present

  • Senior IT Auditor (Security Control Assessor)

    Ernst & Young LLP

    Jan 2018 — Dec 2022

  • Senior Audit Associate

    Novogradac & Company LLP

    Aug 2014 — Dec 2017

View Maxwell S.'s profile on Cyberr