GRC Analyst: Cyber Risk & Compliance

Hashine Hogue

*** ******** *** • Locust Grove, GA 30248 *******.*****@*****.*** 470-***-****

GRC Analyst Cyber Risk & Compliance Analyst DHS Security Background

[Phone] • [Email] • LinkedIn: [Profile] • Location: [City, State]

Professional Summary

Governance, Risk, and Compliance (GRC) professional with 7+ years enforcing federal regulations in high-risk environments at DHS/TSA, complemented by hands-on cybersecurity training and business administration expertise. Experienced in risk assessments, regulatory compliance, audit readiness, control mapping, and security documentation. Skilled at translating security requirements into operational controls, mitigating threats, and supporting organizational compliance in healthcare, finance, and government-regulated environments.

Keywords included: Governance, Risk & Compliance, regulatory compliance, audit readiness, control mapping, risk assessments, security documentation, threat mitigation

Core Skills

Governance, Risk & Compliance (GRC) Skills:

Risk assessments, likelihood & impact evaluation

Regulatory compliance & policy enforcement (TSA, HIPAA, Medicare/Medicaid)

Audit readiness & evidence collection

Control mapping & internal controls

Risk mitigation & risk acceptance

Security documentation & reporting

Third-party & operational risk

Access control & IAM (AWS)

Cybersecurity & Technical Skills:

Vulnerability assessments (Nessus, Nmap, Metasploit)

Threat modeling & Cyber Kill Chain

Network traffic analysis (Wireshark)

Security operations fundamentals

Windows & Linux environments

Frameworks & Standards:

NIST RMF & NIST 800-53

SOC 2

HIPAA

ISO 27001

Professional Experience

Transportation Security Officer (TSO)

Department of Homeland Security – TSA, Atlanta, GA April 2018 – Present

Enforced federal security regulations and ensured continuous regulatory compliance

Conducted risk assessments to identify operational vulnerabilities and implement mitigation strategies

Documented incidents, corrective actions, and compliance findings for audit readiness

Supported control mapping, policy enforcement, and access control procedures in highly regulated environments

Trained and mentored personnel as OJT Coach, ensuring adherence to SOPs and compliance standards

Selected for National Deployment Team to support high-risk, time-sensitive security operations

Cybersecurity Analyst Trainee

Springboard Cybersecurity Career Track – Remote Dec 2022 – Mar 2024

Conducted risk-based vulnerability assessments using Nessus, Nmap, and Metasploit

Applied threat modeling techniques to evaluate likelihood, impact, and business risk

Supported audit-style reporting by documenting findings and remediation recommendations

Gained hands-on experience with IAM and access control configurations in AWS

Analyzed network traffic and security events to identify potential threats

Financial Counselor

Cook County Health – Chicago, IL June 2013 – April 2016

Ensured compliance with Medicare and Medicaid regulatory requirements

Conducted financial risk assessments and eligibility verification

Maintained accurate documentation in audited healthcare systems

Created detailed financial plans aligning with risk and income analysis

Education & Certifications

Bachelor of Science in Business Administration – Texas College, 2002

Cybersecurity Certification – Springboard, 2024

Certifications & In-Progress:

Certified TSA Screener

Hazmat & RR101 Certified

CompTIA Security+ (In Progress)

Awards & Recognition

DHS Certificate of Appreciation & Coin – Santa Barbara (2021)

Customer Service Award – Hartsfield-Jackson ATL (2020)

National Deployment Team Member – Critical mission support across the U.S.

OJT Coach – Trained 7+ new TSA officers

Projects / Capstone Experience

Capstone Security Project

Full-cycle security analysis including reconnaissance, vulnerability scanning, and reporting

Applied tools like Nmap, Nessus, and Metasploit to simulate risk and threat analysis

Small IT Business Project

Designed Wi-Fi network expansion plan including scope and risk evaluation

Implemented project management tools and documented compliance and control processes

Gantt Chart Initiative

Built roadmap to upgrade systems across 5 countries within 8 months

Visualized dependencies and task sequencing for risk-aware project delivery

Contact this candidate