← Back to directory
James Brown

James Brown

GitHub LinkedIn Blog

About Me

Governance, Risk & Compliance (GRC) professional transitioning from Privileged Access Management (PAM) into enterprise risk governance. Experienced in privileged access controls, identity lifecycle management, risk assessments, audit readiness, and regulatory compliance. Skilled in aligning security controls with NIST, ISO, and SOC frameworks and translating technical requirements into risk-based governance solutions that strengthen compliance and reduce organizational risk.

Experience Highlights

  • Forked and audited a deliberately non-compliant Patient Intake API (cgep-app-starter) against Cybersecurity Maturity Model Certification (CMMC) Level 2 / NIST SP 800-171 Rev 3, closing 8 identified control gaps through 11 total Open Policy Agent (OPA)/Rego policies (8 new plus 3 inherited) with a fully passing 31/31 automated test suite.

Get in Touch

LinkedIn

Specializations

Compliance AutomationIdentity & Access ManagementSecurity GovernanceSecurity OperationsAI Governance

Languages & Tools

BashOPA/RegoOSCALTerraform

Frameworks

CMMCNIST 800-53NIST 800-171

Projects

James Brown GRC Engineering Portfolio

Using the CMMC Level 2 Framework to Remediate Gaps