Lena Goffney

Information Security Auditor @Freelancer

✔️ ITSecurity Analyst

As an Associate Auditor, my focus was on elevating SOC 2 compliance frameworks and ensuring robust security controls. With a foundation in Security Administration and Third Party Risk Management, I meticulously analyzed and communicated audit findings to enhance organizational security postures. My recent achievements include a 98% accuracy rate in audit reporting and an 80% success rate in implementing recommended control improvements. My tenure as an Information Security Consultant allowed me to lead SOC 2 readiness assessments, where I identified critical gaps and spearheaded process enhancements, culminating in the successful implementation of key improvements on a quarterly basis. Collaborating closely with senior auditors and clients, I contributed to a culture of continuous improvement and risk mitigation. I am ready for my next opportunity where I can leverage my current skills and learn new ones. If you are interested in working with me, let's connect. I am available on LinkedIn and Gmail at lenagoffney@gmail.com. I respond to all messages within 1 business day.

Feedback from Lena’s ex-colleagues

Let me see

Keep in touch with meI'm using Intch to connect with new people. Use this link to open chat with me via Intch app

Work Background

Prescient SecurityAssociate Auditor

Jul. 2024 - Jul. 2024• Collected and analyzed audit evidence to validate compliance with SOC 2 requirements. • Performed detailed analysis and evaluation of control design and effectiveness, achieving 90% coverage of control objectives. • Prepared comprehensive audit findings, with 98% accuracy rate. • Provided recommendations for control improvements, achieving 80% implementation. • Communicated audit results and findings to senior auditors and clients.

Prescient SecurityInformation Security Consultant

Aug. 2023 - Jun. 2024• Conducted comprehensive SOC 2 readiness assessments, identifying gaps in current practices compared to SOC 2 criteria. •Tracked and reported the completion of readiness assessments, aiming for at least 95% completion within scheduled timelines. •Evaluated risks associated with non-compliance, providing quantified risk assessments to prioritize remediation efforts. • Served as the primary point of contact during SOC 2 readiness assessments and formal audits. • Identified opportunities for improving SOC 2 readiness processes and controls, implementing at least three significant process improvements quarterly.

ReliasCyber Security Auditor

Oct. 2022 - Jun. 2023Morrisville, North Carolina• Collected and documented evidence for over 150 control activities across multiple departments and systems. • Compiled more than 200 pieces of documentation, including policy documents, system logs, and configuration files, to support audit testing. • Achieved a 98% on-time submission rate for requested evidence. contributing to the timely completion of the audit schedule. • Developed a centralized repository for SOC 2 and HiTrust audit evidence, reducing the time spent on evidence retrieval by 40%. • Facilitated third-party risk assessments using OneTrust at an 80% success rate.

ReliasInformation Security Specialist

Sep. 2021 - Sep. 2022Morrisville, North Carolina• Monitored security events using Varonis DatAdvantage, resulting in the identification of potential security incidents and anomalies. • Maintained a 70% resolution rate of security incidents within a 3-day timeframe. • Collaborated with relevant teams to remediate and mitigate identified vulnerabilities. • Stayed updated with the latest security threats and attack techniques through external sources and threat intelligence platforms.

TAD PGS, Inc.Cyber Security Specialist

Jun. 2020 - Jul. 2021Roanoke, Virginia• Implemented and enforced compliance with NIST 800-53, using RMF guidelines for Information Systems. • Conducted regular audits of workstations and servers, ensuring adherence to standards and policies. • Achieved a 98% success rate in weekly audits. • Maintained up-to-date antivirus protection for classified systems

Prime Technical Services Inc.Security Administrator

Jun. 2018 - Jun. 2020Norfolk, Virginia• Administered HBSS devices and ForeScout CounterAct for DoD Naval Base, Norfolk, VA. • Deployed server modules with necessary updates at an 85% success rate. • Successfully added devices to the ForeScout CounterAct MAC Repository at a 90% success rate.

Apex SystemsMigration Engineer

Feb. 2018 - May. 2018Multiple Locations• Supported migration of Windows 7 to Windows 10 for military bases in Camp Lejeune, Quantico, and Oklahoma City. • Re-imaged over 100 computers with a 98% success rate. • Provided comprehensive Windows 10 navigation training to users.

Excentium, IncSecurity Engineer

Mar. 2016 - Jun. 2017Raleigh, North Carolina• Facilitated deployment of comprehensive CDM solution encompassing various security tools. • Demonstrated expertise in installing and configuring multiple security software tools for seamless integration. • Strengthened system integrity through rigorous reliability tests using automated control testing methodologies

CDI Engineering SolutionsSystem Administrator

Jul. 2015 - Feb. 2016Durham, North Carolina• Oversaw daily backup activities to ensure that all file systems and system data were successfully backed up in the correct locations. • Analyzed and tracked various issues and errors, troubleshooting and correcting in real time when possible or escalating to top-tier support if necessary. • Developed a system to track common errors that were encountered so that issues could be resolved quicker. • Proactively addressed errors before they caused the backup to fail, reducing the number of support tickets by 20%

CDI Engineering SolutionsHelp Desk Analyst

Jan. 2015 - Jul. 2015Cary, North Carolina• Troubleshoot incoming issues and support requests from clients’ employees, including credential resets, VPN connectivity, Outlook errors, and various hardware related issues. • Tracked all service tickets in an issue management system. • Collaborated with tier-2 support to resolve issues as quickly as possible. Provided superior customer service so that clients were confident their issues were a priority. • Reduced the number of escalated tickets by 30% by successfully solving issues at the first tier level.

Insight GlobalImplementation Project Manager

Jun. 2014 - Nov. 2014Raleigh, North Carolina• Oversaw the implementation of various software systems from start to finish. • Directed the onboarding process for new clients in order to develop a professional relationship and gather requirements for the implementation. • Collaborated with implementation team in order to deliver services and perform the implementation. • Managed the project by assigning resources, tracking progress, and scheduling tasks. • Achieved 100% completion for 25 implementation projects by carefully overseeing all aspects of the project.