Anthony Umoh

About Anthony Umoh

As a Security & Compliance Analyst, I specialize in governance, risk, and compliance…

Experience

1. Grc Analyst

   Maximus

   May 2023 — Present · Sacramento, CA, US

   Direct compliance monitoring across ISO 27001, NIST 800-53/171, HIPAA, PCI-DSS, SOX, and GDPR; build KPI dashboards in Power BI and Archer/ServiceNow GRC to streamline audit readiness and executive reporting. • Lead cross-functional risk assessments for new initiatives; formalize risk quantification, assign owners, and track remediation in GRC to ensure timely closure of high-risk items. • Manage vendor due diligence, including risk profiling, questionnaires, and evidence validation, to accelerate onboarding while safeguarding compliance standards. • Support SOC 2, HIPAA, and SOX audits by curating evidence, executing control testing, and resolving RFIs ahead of deadlines with clear leadership updates. • Orchestrate vulnerability management with infrastructure and cloud teams (Qualys, Nessus, Tenable), driving SLA compliance and faster remediation of critical findings. • Investigate compliance breaches with IR teams using Splunk and EDR telemetry; document root causes, corrective actions, and ensure regulatory reporting obligations are met. • Deliver quarterly compliance and risk training, increasing policy awareness and embedding consistent control adoption across business units. • Partner with Legal and Privacy to interpret GDPR/CCPA, HIPAA, and SOX updates, embedding requirements into corporate policies and procedures.