ricardo@grc

~/portfolio/projects

Selected GRC case studies.

Public, sanitized accounts of compliance delivery, GRC engineering, risk operations, and service design.
projects/pci-dss-4-0-1

Azion

PCI DSS 4.0.1 early adoption

Helped lead delivery of PCI DSS 4.0.1 Level 1 Service Provider compliance, coordinating the implementation of newly applicable requirements across a globally distributed technology platform.

result.outputNewly applicable requirements delivered ahead of schedule
PCI DSS 4.0.1Audit ReadinessControl Design
case-study.md
verify certificationopen case study →
projects/auditboard-grc-automation

Azion

GRC platform implementation & automation

Implemented and operated AuditBoard with standardized control structures, evidence collection, policy and risk workflows, and supporting automation for recurring compliance activities.

result.output20% reduction in audit preparation time
AuditBoardWorkflow AutomationEvidence
case-study.md
open case study →
projects/grc-intake-automation

TRACTIAN

GRC intake & questionnaire automation

Created an official GRC intake process and internal help center, then automated security questionnaire workflows to improve consistency and make governance support easier to access.

result.outputA scalable entry point for GRC requests and guidance
Service DesignQuestionnairesAutomation
case-study.md
open case study →