Monicah Murache

About Monicah Murache

I am a Cybersecurity Analyst with 6+ years of experience advancing Governance, Risk & …

Experience

1. Cyber Security Analyst

   Aspinrock

   Jun 2025 — Present · Raleigh, NC, US

   Threat Detection & Risk Governance – Directed cybersecurity due diligence for M&A by assessing third-party SaaS and IT vendors, reviewing SOC 2, PCI DSS AoC, and SIG reports, and quantifying residual risk. Delivered executive risk summaries with ratings and post-close mitigation strategies, integrating results into the enterprise risk register.• Audit, Assurance & Compliance – Conduct internal audits and gap assessments aligned to NIST, ISO 27001, SOC 2, SOX, GDPR, and HIPAA. Support ITGC/ITAC testing and regulatory evidence collection. Architected a Unified Control Library (UCL) to map and harmonize controls across frameworks, streamlining compliance oversight for audit committees.• Incident Response & Resilience – Lead high-impact incident investigations, execute IR playbooks, and conduct forensic reviews to strengthen resilience. Collaborate with IT, Legal, and Compliance leadership to ensure risk acceptance and treatment decisions are governed and reported at the enterprise level.• Governance & Security Culture – Develop policies (Access Management, Change Management, Incident Response, Vendor Risk) aligned with ISO 27001 Annex A and COSO principles. Drive KRIs/KCIs, RACI models, and targeted training that embed governance, strengthen awareness, and build a culture of compliance and resilience across all business units.