Tiqua Saunders

About Tiqua Saunders

Strategic and results-driven GRC Analyst with experience specializing in risk assessments, policy development, and internal audits to ensure adherence to industry standards. With a data-driven and analytical mindset, I identify vulnerabilities, implement controls, and align security initiatives with business goals. Collaboration is key, partnering with cross-functional teams to build governance frameworks that meet regulatory needs and improve efficiency. Staying ahead of evolving regulations, I translate complex mandates into strategies that strengthen cybersecurity and risk management. Committed to reducing risks, fostering compliance, and driving growth through strong governance and security practices. Notable GRC Impacts: Third-Party Risk Assessment: Enhanced vendor security oversight and risk reduction by 20%, ensuring stronger supply chain security and compliance with organizational policies. Policy Development & Risk Reduction: Strengthened internal controls and reduced overall organizational risk exposure by 15% through improved security policies. Audit & Compliance Readiness: Proactively prepared documentation to maintain compliance certifications, reducing audit findings and ensuring ongoing regulatory adherence by 95%. Risk Management & Controls Implementation: Improved data security and reduced compliance gaps by 30%, strengthening financial application resilience. GRC Areas of Expertise: ∙Expertise in aligning risk, compliance, and cybersecurity with regulatory standards and business goals using NIST 800-53, ISO 27001, and HIPAA. ∙Skilled in risk assessments, mitigation planning, and compliance monitoring to reduce exposure and support audits. ∙Strong communicator with experience collaborating across legal, IT, finance, and procurement teams to improve operations. ∙Proficient in analyzing risk metrics, audit findings, and trends to guide decisions and strengthen governance. Technical Tools- Tenable Nessus - Qualys - Microsoft Azure - Nmap & Zenmap - OWASP Zap - RSA Archer - Jira Core Competencies: Risk Assessment & Analysis Regulatory Compliance Management Policy Development & Implementation Third-Party Vendor Risk Management Business Impact Analysis Incident Response Planning Security Awareness & Training Compliance Audits & Assessments Identity & Access Management Framework Adherence Risk Communication & Documentation Vulnerability Management For more information about my work, please reach out with your inquiries directly: s••••••••@gmail.com

Experience

1. Grc Analyst

   Myitacademy

   Jan 2023 — Present · Austin, TX, US

   Conduct risk assessments to identify and mitigate security vulnerabilities, reducing potential threats by 30% and enhancing the organization’s risk posture.∗ Oversee compliance initiatives to ensure adherence to ISO NIST 800-53, ISO 27001, PCI-DSS, and other industry-specific regulations.∗ Evaluate vendor security controls, ensuring compliance with company policies and reducing third-party security incidents by 25% through stronger risk mitigation strategies.∗ Develop and maintain security policies and internal controls, improving policy adherence by 40% across departments and reducing policy violations by 20%.

Education

• Washington Adventist University

  Bachelor of Science