GRC professional with 6+ years of experience in risk, compliance, IT audits, SOC 2, ISO 27001, and helping organizations strengthen security.