Victor E.

About Victor E.

Security Control Assessor | Information Security Analyst | Business & Compliance…

Experience

1. Senior IT Risk and Compliance Analyst

   UPS Supply Chain Solutions

   Jun 2022 — Present · NJ, US

   Lead enterprise compliance initiatives across SOX, SOC 2 Type 2, GDPR and ISO 27001 frameworks, ensuring regulatory adherence and audit readiness.• Conduct end to end IT risk assessments, identify control gaps, and implement remediation plans to reduce risk exposure and strengthen compliance posture.• Assess and monitor security controls to ensure effectiveness and alignment with internal policies and framework compliance standards.• Collaborate with cross functional teams to define, document, and enhance IT policies, procedures, and governance practices that support business objectives.• Support internal and external audits by preparing documentation, coordinating evidence collection, and resolving findings efficiently, while maintaining risk registers and tracking efficiently.• Respond to vendor and customer security questionnaires, improving turnaround time and strengthening third-party trust.• Evaluate policy exceptions and waivers to ensure they meet compliance intent while maintaining appropriate risk thresholds and safeguards.• Deliver compliance dashboards and risk reports to stakeholders, aligning metrics with strategic goals and driving continuous control maturity and monitoring.• Execute IT risk assessments across enterprise systems and implement remediation plans—reducing identified control gaps by 30% within two audit cycles in alignment with SOX, SOC 2 Type 2, and ISO 27001 frameworks.• Oversee daily project management activities for compliance initiatives, consistently meeting 100% of critical deadlines and maintaining audit-ready documentation with less than 5% rework during review cycles.

Education

• Stevenson University

  Master of Business Administration - MBA, Business Administration, Management and Operations

  2020 — 2022