GRC & IT Risk Analyst | Vulnerability Management | Third-Party Risk I’m a cybersecurity professional with 4+ years of experience across vulnerability management, GRC, and third-party risk. I’ve managed vulnerability programs across IT/OT assets using Qualys VMDR, automated compliance dashboards that cut audit-prep effort by 75%, and led a 97-person remediation team. I’m a Qualys Certified Specialist (VMDR), I’m working toward CISA, and I can built an ISO 27001 ISMS project from scratch. I can help you if you’re trying to break into GRC or vulnerability management, or if you’re moving from a technical or non-security background. I focus on practical steps: what to learn, what to build, and how to talk about it in interviews.