IT audit & risk management professional specializing in SOX, SOC 1/2, HITRUST, GDPR, PCI-DSS, and internal controls over financial reporting (ICFR).