Preeti O.

About Preeti O.

Experienced GRC (Governance Risk and Compliance) Information Security Professional with a strong background in developing and implementing governance frameworks, managing risk assessments, and ensuring regulatory compliance. Proficient in aligning security strategies with organizational objectives and industry standards. Demonstrated success in client audits, internal audits, SOC 2 audits, and ISO 27001, ISO 27701 and ISO 22301 audits. Strong analytical skills and a strategic approach to enhancing overall security posture and ensuring adherence to compliance requirements.

Experience

1. Cyber Risk Manager

   Siterx

   Sep 2025 — Present · New York, NY, US

   Implement and maintain compliance with NIS2 Directive using Anecdotes AI to monitor and track regulatory requirements.Conducting GDPR-focused vendor risk assessments leveraging MineOS to ensure third-party adherence to privacy and data protection standards.Leading SOC 2 audit preparation by managing evidence collection, coordination, and documentation in Anecdotes AI to ensure readiness for internal and external review.Own enterprise risk governance, maintaining the centralize risk register using Anecdotes AI, collaborating with stakeholders across departments to discuss findings and remediation plans as part of internal audit processes.Prepare and present monthly GRC metrics and KPIs to the CISO for leadership review, providing actionable insights into risk posture, compliance status, and remediation progress.Manage security projects and coordinate initiatives using Notion to track progress and team collaboration.Partner with IT and business teams to identify, assess, and mitigate risks related to infrastructure, applications, and third-party services.

Education

• Ithaca College

  Cybersecurity certification, Cybersecurity

• Long Island University

  Bachelor's degree