Governance · Risk · Compliance
NIST CSF 2.0 · Candidate Record
GRC & Cybersecurity Risk
The Short Version
Compliance isn't the binder. It's knowing which vendor should keep you up at night.
Controls are easy to list and hard to prove. I do the unglamorous part — scoring the risk, chasing the evidence, closing the finding — so the decision at the top is made on something real.
Background
I'm a Master's in Cybersecurity candidate at the University of Dallas, concentrating in Governance, Risk & Compliance, holding a 4.0 GPA and graduating Fall 2026. Before this I earned a B.A. in Business Administration from Austin College, minoring in Accounting and Spanish, a background that turned out to matter more than I expected, since GRC work is as much about process, documentation, and stakeholder communication as it is about technical controls.
Before moving into security, I worked in regulated, client-facing roles, including HIPAA-compliant pharmacy workflows at Walgreens and broker support at Orion Lending, where accuracy and documentation were part of the daily job, the same discipline that carried directly into vendor risk work at Digital Realty. I'm looking for an entry level role where I can support risk assessments, control testing, and third-party risk management, and long term I see myself in a role that blends business and security, working toward CISO by helping a business make the security decisions that keep it running.
Applied Experience
Digital Realty · Dallas, TX · 2026
Helped maintain third-party risk records in a GRC/TPRM platform, initiated and tracked vendor remediation requests, resolved 60+ tickets within defined SLAs, and contributed to threat landscape summaries that informed risk prioritization.
Walgreens · Orion Lending
HIPAA-compliant pharmacy workflows and broker support in regulated, client-facing environments where accuracy, documentation, and process discipline were part of the daily job.
Applied Projects
Coursework & Exercises
REF. IAM–01
Mapped real-world breaches against the NIST Cybersecurity Framework. Co-authored with a classmate for CYBS 7350.
REF. CMMC–02
Self-study assessment of a fictional defense contractor; built out SPRS scoring and a POA&M.
REF. GAP–03
Capstone for the Google Cybersecurity Certificate; evaluated a program against the CSF functions.
Framework exposure — ISO 27001, SOC 2, HIPAA, PCI DSS — is coursework and internship-level familiarity, not claimed mastery.
What I Work With
Leadership
ISSA Subchapter, University of Dallas · 2025–Present
Coordinate with the chapter president and officers to plan workshops, guest speaker events, and networking opportunities on cybersecurity trends and professional development. Manage club funds alongside running the events calendar.
Rho Lambda Theta, Austin College · 2019–2022
Progressed through all three officer roles over four years. Started by managing the chapter's budget and financial records as Treasurer, moved into supporting executive decisions and event planning as Vice President, then led the organization directly as President.
Also
Community
Get In Touch
Looking for an entry level GRC, risk, or compliance analyst role in the Dallas area. Reach out directly, or grab the resume below.
Or view the resume directly.
