Thelma C. McRipley

WORK HISTORY

EDUCATION

ABOUT THELMA C. MCRIPLEY

A results-driven GRC professional skilled in compliance, risk mitigation, and policy enforcement. Proven ability to develop and implement robust strategies that safeguard organizational assets and ensure compliance with industry regulations. Demonstrated success in: Risk Assessment and Mitigation- Conducting comprehensive risk assessments to identify and mitigate risks associated with third-party relationships- Implementing effective controls and monitoring mechanisms to manage third-party risks proactively.Collaborative Risk Management- Skilled in collaborating with cross-functional teams, fostering open communication, and aligning stakeholders\' interests- Adept at establishing risk-based controls to protect organizational interests.Strategic Risk Communication- Exceptional ability to communicate complex security concepts and risks to stakeholders at all levels- Providing actionable recommendations to enhance security posture and mitigate potential threats.Compliance and Regulatory Expertise- In-depth knowledge of industry regulations and best practices related to risk management- Ensuring organizational compliance through robust risk management frameworks and processes.Leveraging a proven track record of effectively assessing, monitoring, and mitigating risks, I am committed to driving organizational success while maintaining a strong security posture.Technical Skills & ToolsThird-Party Risk Assessment | Regulatory Compliance | Vendor Due Diligence | Risk Mitigation Strategies | Policy Development | Third-Party Risk Management | Stakeholder Engagement | Risk Monitoring and Reporting | Issue Resolution | Audit and Assessment Coordination | Security Compliance | Data Security | Developing Security Plans | Implementing Security Programs | Wireshark | Nmap | HIPAA | Security Score Card | Implementing Security Controls | Nessus Software | PCI -DSS Compliance | Risk Management Framework (RMF)| SIEM Monitoring | NIST 800 Series | Plan of Actions and Milestone (POAM)| System Security Plan (SSP)| System Assessment Report (SAR)| Assessment and Authorization (A&A)| Risk Analysis | Risk Assessment | Risk Control & Mitigation Security Life Cycle | Threat Vulnerability Assessments | Threat Reports | Contingency Planning | Microsoft Office Suite (Word, Excel, PowerPoint, Visio, Outlook)#complianceanalyst #thirdpartyriskanalyst #informationsecurityanalyst #grcanalyst #cybersecurityanalyst #vulnerabilityanalys