
Michael A
Senior Leader in GRC, Privacy, and Cyber Security and Information Risk
Skills

See my services

Work experience
Senior GRC Manager
Facebook • Full-time
Jun 2024 - Nov 2025 • 1 yr 5 mos
ead strategic Governance, Risk & Compliance (GRC) initiatives across global operations. Manage and mentor a team of GRC, cybersecurity, and audit professionals across multiple geographies. Oversee cybersecurity, privacy, compliance, and operational risk management for large-scale enterprise environments. Develop and implement enterprise risk mitigation strategies and governance frameworks. Ensure compliance with GDPR, CCPA, ISO 27001, SOC 2, NIST, and other regulatory standards. Lead audit readiness, technical compliance reviews, and regulatory engagements. Conduct vendor security assessments and third-party risk management activities. Drive incident response, privacy breach management, and remediation initiatives. Partner with Legal, Engineering, Security, Product, and executive leadership teams on compliance and risk programs. Deliver executive-level risk reporting, governance dashboards, and board updates. Improve operational resilience through process optimization, workflow automation, and continuous improvement initiatives. Establish fraud detection, monitoring, and compliance control measures to reduce organizational risk.
Senior Data Privacy and Protection Consultant
EY • Full-time
Aug 2022 - Sep 2023 • 1 yr 1 mo
Collaborated with Product Managers to analyze privacy metrics and mitigate risks in products and services. Managed internal controls for privacy legal frameworks and coordinated internal/external audits. Established guidelines for global legal obligations and managed privacy impact assessments and intake management while overseeing privacy training programs.