I'm an aspiring cybersecurity professional focused on Governance, Risk & Compliance (GRC), vulnerability management, and security operations.

Through hands-on projects, I've developed practical experience assessing cybersecurity risks, evaluating security controls, implementing remediation strategies, and documenting technical findings.

My portfolio demonstrates both the technical and business-risk perspectives of cybersecurity, from identifying vulnerabilities to developing risk-based remediation roadmaps.

Simulated cybersecurity risk assessment of a fictional organization aligned with NIST CSF 2.0.

• Evaluated cybersecurity control gaps across seven risk scenarios.
• Developed a risk register using likelihood and impact scoring.
• Prioritized remediation based on risk exposure, business impact, and implementation considerations.
• Created an executive assessment report, detailed risk analysis, and three-year cybersecurity improvement roadmap.

• Conducted vulnerability assessments using Tenable.
• Analyzed and prioritized identified vulnerabilities.
• Implemented remediation procedures and performed follow-up validation.
• Documented findings and remediation results.

• Assessed Windows 11 security configurations against DISA STIG requirements.
• Remediated 10 security findings using PowerShell and manual configuration changes.
• Used Tenable to validate remediation effectiveness.
• Documented before-and-after results and remediation procedures.

Additional threat hunting and security operations projects are in development.