Bi Niba

Grc Analyst @Cognizant

Coordinated incident response efforts across multiple departments, fostering teamwork in resolving complex issues effectively.• Developed and maintained detailed documentation on security processes, facilitating knowledge transfer and ensuring consistency in procedures.• Participated in tabletop exercises simulating cyberattacks, leading to better preparedness for real-world incidents.• Educated employees on cybersecurity awareness through training sessions, significantly reducing instances of human error-related breaches.• Completed vulnerability scans to identify at-risk systems and remediate issues.• Evaluated third-party vendors\'\' security posture during contract negotiations, ensuring adherence to organizational requirements and minimizing risk exposure.• Designed secure infrastructure solutions in collaboration with the IT team, minimizing vulnerabilities from outdated or misconfigured systems.• Partnered effectively with Information Security, Product, Platform, Internal Audit, Legal, and other internal peers to support compliance with legal, regulatory, and security frameworks.• Worked closely with the Internal Audit Team to ensure alignment on timing, controls reliance, and external audit reliance.• Possessed knowledge and experience in risk management, audits (SOC 1, SOC 2, PCI DSS), and information security best practices, applying them to enhance organizational security posture and compliance efforts.• Supported the development of new testing automations through the GRC platform to automate IT internal controls testing.• Maintained updated knowledge in risk management and compliance frameworks, including NIST CSF, CIS Controls, PCI-DSS, and SOX 404• Prepared and presented risk reports for senior management, detailing notable risks and recommended action plans.