Mavis Moreton

About Mavis Moreton

Highly accomplished and results-driven Governance, Risk, and Compliance (GRC) professional with 10+ years of progressive experience in developing, implementing, and optimizing comprehensive GRC programs. Proven expertise in enterprise risk management, regulatory compliance and information security governance within complex organizational structures. Adept at leading cross-functional teams to identify, assess, and mitigate risks, significantly reducing audit findings by 25% and strengthening the overall control environment. Seeking to leverage strategic GRC leadership to drive operational excellence and ensure robust compliance in a forward-thinking organization.

Experience

1. Senior Grc Analyst

   Fiserv

   Sep 2019 — Present · US

   Led the design and implementation of department-wide GRC framework aligned with NIST CSF and ISO 27001, resulting in a 30% reduction in critical audit findings over two years.• Managed the full lifecycle of risk assessments for 10+ critical business applications and infrastructure, identifying key vulnerabilities and driving mitigation strategies that reduced overall risk exposure by 20%.• Developed and enforced comprehensive information security policies, standards, and procedures, ensuring compliance with GDPR, CCPA, and SOX regulations across all operations.• Directed third-party risk management program, assessing vendors annually and negotiating security clauses that strengthened contractual protections.• Liaised directly with internal and external auditors successfully guiding the organization through annual SOC 2 Type II and PCI DSS audits with zero material findings.• Mentored a team of 4 GRC analysts, fostering professional growth and improving team efficiency by 25% through process optimization.• Authored comprehensive risk treatment plans and mitigation strategies for identified vulnerabilities, reducing overall organizational risk exposure by an average of 15% year-over-year.• Served as primary liaison for external auditors during annual SOX, SOC 2, and PCI DSS audits, facilitating evidence collection and successfully closing 95% of audit observations within agreed timelines.• Managed the remediation efforts for audit findings and control deficiencies, coordinating cross-functional teams to ensure timely and effective resolution.• Led the cross-functional working group responsible for maintaining and improving the Business Continuity and Disaster Recovery (BCDR) plans, conducting annual tabletop exercises with 100% participation from critical teams.

Education

• Ohio University

  Master's degree, Project Management