Ib A.

About Ib A.

Senior Information Security and GRC professional with 12+ years of experience leading enterprise-wide risk management, regulatory compliance, and audit programs across financial services, SaaS, and healthcare environments.I specialize in building scalable, audit-ready security programs that reduce risk, accelerate compliance, and strengthen customer trust. My work has consistently delivered clean audit opinions, reduced manual compliance effort through automation, and enabled revenue growth by supporting customer trust initiatives. What I Do Best:Lead SOC 2 Type II, PCI DSS Level 1, ISO 27001, NIST, FFIEC, HIPAA, GDPR & CCPA programs at enterprise scaleDesign and execute enterprise risk assessment frameworks, maintaining large-scale risk registers with measurable remediation outcomesImplement and optimize GRC platforms to automate evidence collection, control testing, and executive reportingManage third-party & vendor risk programs, significantly reducing high-risk vendor exposurePartner with executives, auditors, legal, sales, and engineering teams to translate security into business value Proven Impact:Maintained 48+ months of zero-exception SOC 2 auditsReduced audit preparation time by up to 75%Achieved 85% reduction in high-risk findingsDelivered 99%+ compliance adherence across PCI DSS and regulatory programsSupported customer trust & presales security initiatives with near-perfect satisfaction ratingsI thrive in environments where security, compliance, and business strategy intersect and enjoy mentoring teams, modernizing GRC operations, and enabling organizations to scale securely. Open to conversations around Senior GRC, Risk, Compliance, Trust, and Security Leadership roles.

Experience

1. Senior Information Security Analyst Technical Program Manager

   Moneygram

   Jun 2019 — Present · TX, US

   Led multiple global compliance programs, delivering 100% on-time milestone completion, by defining program roadmaps, success criteria, and execution plans across SOC 2, ISO 27001, PCI DSS, and NIST framework* Improved regulatory readiness and audit outcomes, by 48 consecutive months of clean SOC 2 Type II opinions and PCI, by designing and implementing standardized control management, evidence workflows, and risk based testing strategies* Led enterprise compliance risk remediation efforts, reducing high-risk findings by 85% through gap analysis, executive stakeholder advisory, and governance of corrective actions via a centralized risk register* Led enterprise GRC platform implementations (AuditBoard, Archer, OneTrust, Onspring), automating control testing and monitoring workflows and reducing manual compliance effort by 73%* Enabled global product and technology compliance, measured by continuous certification across 15 global offices, by coordinating cross-functional stakeholders in Legal, Privacy, Engineering, IT, and Product to implement regulatory requirements* Advanced data protection and privacy compliance, measured by successful GDPR and CCPA adherence, by translating regulatory obligations into actionable requirements and integrating them into operational and technical processes* Led third-party and supply chain risk management initiatives by program managing vendor security assessments, continuous monitoring, and control enforcement across 120+ vendors, resulting in a 72% reduction in high-risk vendors* Improved customer trust and regulatory confidence by leading audit responses, scaling trust center operations, and standardizing security compliance documentation across global requirements, resulting in 99% customer satisfaction* Supported AI governance initiatives, measured by timely regulatory readiness, by collaborating with Legal and Privacy teams to assess emerging compliance risks related to data usage, automation, and AI enabled processes