Rita Anane

About Rita Anane

Dynamic and detail-oriented GRC and Cybersecurity professional with over 7 years of…

Experience

1. Senior Internal Control and Risk Specialist

   GEICO

   Feb 2019 — Present

   Enhanced IT Security Measures: Developed and standardized procedures for IT general controls (ITGC), including login monitoring, privileged access, and password testing, significantly strengthening the organization\'s security posture. • Streamlined Compliance Processes: Led SOX and ISO 27001 IT testing, coordinating with IT to ensure complete asset inventory and adherence to regulatory requirements, resulting in successful compliance audits. • Improved Risk Management: Conducted quarterly IT control tests to assess effectiveness and identify risks, developing comprehensive Course of Action Plans (CAPs) to mitigate potential issues. • Optimized ITGC Testing Efficiency: Collaborated with IT to execute scripts and generate necessary files, ensuring accurate and efficient compliance testing. • Policy Enforcement and Vulnerability Reduction: Enforced organizational policies by disabling dormant user accounts, reducing potential vulnerabilities, and improving account management practices. • Upgraded Security Policies: Regularly updated IT security policies, procedures, standards, and guidelines to align with department and federal requirements. • Strengthened Database Security: Collaborated with database teams to enforce password restrictions and develop retention requirements, ensuring compliance with organizational and regulatory standards. • Supported PCI DSS Compliance: Contributed to PCI DSS audits by meeting compliance requirements and conducting monthly reviews, strengthening the organization’s adherence to standards which ensured that no Cardholder Data was retained without justification. • Effective Risk Remediation: Coordinated with cross-functional teams to gather evidence and conducted risk remediation, ensuring alignment with NYDFS, State L&R requirements, and organizational policies which ensured operational efficiency and Continuous Improvement.