Allyson K.

About Allyson K.

I build security programs that don’t make people groan.Ten years in GRC, audit, and cloud security have taught me how to keep companies compliant without killing their velocity. I’ve wrangled frameworks like NIST 800-53, SOC 2, HIPAA, PCI, and ISO, and lived to tell the tale.At Pendo, I lead GovRAMP, run third-party risk reviews, and automate the stuff everyone hates dealing with (hi, spreadsheets). My happy place is translating “security says no” into “here’s how we can make it work.”Outside of work, I\'m passionate about uplifting and empowering all women and girls who are interested in tech and animal welfare.

Experience

1. Staff Security Compliance Engineer

   Pendo.io

   Feb 2024 — Present · Raleigh, NC, US

   I lead security risk and compliance programs that keep our SaaS platform audit-ready without slowing down the business.•Runs Pendo’s GovRAMP Moderate authorization program end-to-end, partnering across Engineering, IT, and external assessors.•Performs third-party risk management, reviewing vendors, collaborating with Legal and Procurement•Implemented Vanta and leads the team on GRC migration and automation, providing real-time GRC visibility. •Partners with engineering teams to translate security controls into practical fixes and measurable outcomes.•Mentor junior teammates in the dark arts of GRC- I help them connect the dots between frameworks, controls, and real business value.TL;DR: I make compliance scalable, measurable, and actually useful.

Education

• University of North Carolina Wilmington

  MSA, Masters of Accountancy

  2007 — 2008

• University of North Carolina Wilmington

  BS, Business Administation

  2003 — 2007

• University of North Carolina at Greensboro

  Master’s Degree, Master of Science in Information Technology and Management

  2011 — 2015