Terry Washington

About Terry Washington

Vendor Management • Incident Response • Vendor Risk/Third Party Risk Management, HIPAA, ISO 27001/27002. • Reviewing and Analysing SOC 2 type II reports. • Reviewing and updating Risk Assessment (RA) using NIST SP 800-30 guidelines. • Knowledge of Health Insurance Portability and Accountability Act (HIPAA) Safeguards • PCI DSS Compliance • Experience professional specializing in Customer Evidence Validation and Controls.

Experience

1. Grc Analyst

   Symposia

   Apr 2024 — Present

   Led identifying, analyzing, and resolving security incidents, minimizing impact and recurrence by 25%, while employing advanced risk assessment techniques and incident response protocols- Proactively identified and mitigated vulnerabilities, preventing potential exploitation, and enhancing security posture by implementing risk mitigation strategies, resulting in a 20% reduction in vulnerability-related incidents- Implemented access control measures, reducing successful attacks by 30%, and orchestrated the separation of networks based on threat levels and user sets, aligning with governance standards and industry best practices- Championed the protection of sensitive information on computers interacting with untrusted devices, devising and implementing security measures to mitigate risks, resulting in enhanced data security compliance- Led cross-functional teams in various information technology security initiatives, conducting needs assessments, ensuring compliance with IT security strategic goals, and contributing to the design and implementation of projects, resulting in a 15% improvement in overall security effectiveness- Served as a pivotal Security Liaison, collaborating with federal, state, and local agency security professionals, conducting penetration and vulnerability testing, and providing advanced technical analysis, contributing to the successful planning and execution of security needs in shared IT infrastructure systems- Participated in and led enterprise task forces, committees, and incident response teams, playing a key role in raising security awareness, analyzing security-related issues, and recommending changes to enterprise server hardware and software configurations, aligning with industry innovations and cost-effectiveness- Maintained a high level of professional development by staying informed about security trends, and attending relevant training courses and conferences.

Education

• Western Governors University

  Bachelor of Science - BS, Information Technology

• CodePath

  Certificate Internship Connection Program

• Houston City College

  Associate of Science - AS, Computer Science

  2021 — 2023