Jonalea Gaalema

About

Information security & GRC practitioner. Experienced in security and IT risk management, third-party risk oversight, AI governance, identity and access governance, controls automation, and cybersecurity audit. With a background in business management, I think through risk and vulnerability scenarios from a stakeholder's perspective in order to understand and communicate how security actions, or inaction, may impact an organization's bottom line.Certifications:✔️ CISSP (Certified Information Systems Security Professional)✔️ AAISM (Advanced in AI Security Management)✔️ CISA (Certified Information Security Auditor)✔️ CCSK (Certificate of Cloud Security Knowledge) ✔️ PSM I (Professional Scrum Master)✔️ PSPO I (Professional Scrum Product Owner)✔️ AWS Certified Cloud Practitioner✔️ Advanced SOC for Service Organizations✔️ Security+✔️ Network+✔️ A+Certificates / Trainings:✔️AI Fundamentals for Non Data Scientists, Wharton School of Business Public Speaking and Presentations:• "Human Behavior in AI Adoption", speaker, UNT NEXUS• "Beyond Hype: Building Effective AI Governance Programs", speaker, ISACA Denver Chapter• "The Power of AI/ML for Cybersecurity", panelist at Mindfluence AI Cybersecurity and Leadership Forum, Dallas, TX• "Mitigating Cyber Threats with Limited Resources, Co-Presenter, SchellmanExperience and Skills:Governance, Risk, Compliance, IAM (Identity and Access Management), IT Audit, Cloud Security, Information Risk Management, Vendor Risk Assessment, Policies and Procedures, Privacy, AI Lifecycle and Governance.Tools/Platforms:ServiceNow, Jira, Sailpoint, Saviynt, OneTrust, Upguard, Hyperproof_______