Performed full NIST CSF assessment including current state scoring, gap analysis, and roadmap aligned to executive priorities.

Refreshed enterprise BCP/DR program including performing BIA, documenting recovery objectives, identifying testing strategy, and developing crisis response playbooks.

Modernized IT audit approach with risk-based planning, control rationalization, and automation opportunities.

Built end-to-end TPRM lifecycle including onboarding, risk scoring, monitoring, and issue management workflows.

Streamlined ITGCs by removing redundant controls and aligning testing strategy with risk exposure.