Catherine LaFontaine

GRC & IT Audit Specialist with a track record spanning information systems security, IT audit, risk assessment, and regulatory compliance, including 8+ years leading enterprise ISO 27001:2022 and TISAX readiness assessments and prior public-sector security consulting supporting U.S. federal and government accounts. Skilled in evaluating control effectiveness, conducting risk and vulnerability assessments, developing security policies, and advising system owners and leadership on compliance and risk posture. Experienced in creating and managing Microsoft SharePoint sites for GRC and audit documentation, collaboration, and audit preparation. Pursuing CISA certification. Strong communicator who translates complex security and audit findings into clear, actionable guidance for technical and executive stakeholders.