Lisa R.

About Lisa R.

Experienced in Governance, Risk, Compliance, Privacy, Security, and Data Protection with proven success in applying legal and business perspectives to optimize performance. Recognized for ability to leverage solutions to improve regulatory and operational compliance. Known for building strategic partnerships, exemplary communication and interpersonal skills, and the ability to clarify complex information.Skills include:Compliance/Security Standards, including HITRUST Common Security Framework, NIST SP 800-53, ISO 27001, SOC 2, FedRAMP, and PCI • HIPAA Compliance • Auditing & Monitoring • Risk Assessment & Mitigation • Policy Development & Enforcement • Investigations & Analysis • Incident Management • Physical Security & Access Control • Vendor Oversight • Compliance Training & Education, including Cybersecurity Awareness • Privacy & Data Protection Laws, Regulations, and Controls • Process Improvement • Project Management

Experience

1. Governance, Risk, and Compliance Lead

   Together AI

   Apr 2025 — Present · San Francisco, CA, US

   Design, implement, and lead the compliance program for the organization, including the development, improvement, and implementation of risk-based compliance policies and procedures as well as training programs that address general compliance, security awareness, and data protection. • Ensure compliance with information security standards and frameworks, including SOC 2 Type 2 and ISO 27001:2022 as well as international data protection regulations and state privacy laws. • Collaborate with internal stakeholders to manage and mitigate risk by ensuring that business activities align with compliance and security requirements.• Lead, evaluate, and coordinate efforts related to risk assessments, audits, penetration tests, investigations, and other compliance and security activities.• Manage relationships with external auditors and advisors and monitor external review processes.• Perform contract review and respond to RFPs/RFIs and other security questionnaires.

Education

• Florida International University

  BA, Sociology/Anthropology

  1997 — 2001

• Suffolk University - Sawyer Business School

  MBA, Business

  2004 — 2006

• Nova Southeastern University Shepard Broad College of Law

  JD, Law

  2001 — 2004

Skills

• Management
• Nonprofits
• Sponsorship
• Project Management
• Social Media
• Hipaa
• Entertainment
• Research
• Integrated Marketing
• Legal Research
• Proposal Writing
• Non-Profits
• Program Management
• Copy Editing
• Marketing
• Writing
• Analysis
• Training
• Music Industry
• Start-Ups
• Event Planning
• Event Management
• Public Speaking
• Blogging
• Talent Management
• Public Relations
• Business Planning
• Editing
• Legal Compliance