Justin Romero

Technology Risk and GRC Analyst with 8+ years of experience performing governance, risk, and compliance assessments across enterprise, cloud, and financial systems. Strong expertise in IAM, access governance, vulnerability management, ITGC controls, and audit readiness, supporting compliance with SOX, SOC, NIST, FedRAMP, and ISO frameworks. Proven ability to partner with Security, Infrastructure, and Application teams to identify vulnerabilities, evaluate control effectiveness, and drive remediation efforts across complex environments. Experienced in documenting controls, supporting audits, and strengthening organizational security posture through risk-based analysis and cross-functional collaboration.