Annie W.

About Annie W.

GRC & IT Audit leader with 12+ years of experience building and maturing risk, compliance, and audit programs across highly regulated industries and high-growth technology environments. Demonstrated success driving IT SOX and audit programs maturity through IPO and beyond; achieving initial and continuous SOC and ISO certifications; and leading PCI DSS, HIPAA, NYDFS 500, GLBA, and NIST CSF initiatives. Adept at design automation, bridging technical and business functions to reduce risk and scale programs to meet evolving regulatory demands and industry standards.

Experience

1. Grc Manager 2

   Squarespace

   Dec 2020 — Present

   Lead the GRC function and team at Squarespace, report to the Head of Security. Key accomplishments include: 1. Built and operationalized the inaugural IT SOX program from the ground up, leading readiness and maturity across Pre-IPO → IPO → Post-IPO → Private 2. Spearheaded the inaugural SOC 2 program, achieving Type 1 and Type 2 attestations 3. Delivered PCI DSS 4.0 readiness and continuous compliance 4. Executed HIPAA gap assessment and drove full remediation of all critical findingsResponsible for- Team Management & Development- Cross-Functional Collaboration: Finance, IT, Engineering, Legal, Product, Marketing, CustOps- Compliance Program Build-out & Ownership- External audits coordination - ITGCs, ITACs and Security/IT Controls Design, Implementation, Assessment, Remediation & Reporting- Audit and Compliance Automation- Policy Development- End-to-End Customer Security Questionnaires and Audits- Vendor Security Review and Risk Assessment - Data Privacy Audits

Education

• Boston College

  Bachelor of Science, Accounting and Finance

  2009 — 2013

Skills

• Risk Assessment
• Compliance Monitoring
• Accounting
• IT Risk
• Internal Audit
• Business Risk
• Internal Controls
• Enterprise Risk Management
• Presentations
• Teamwork
• International Exposure