RESILIENCE / SYSTEM DESIGN
Recovery, in one view.
A shared disaster recovery portal connecting test status, system owners, open gaps, and the next action across 25 systems.
A CLEARER PICTURE
GOVERNANCE, RISK & COMPLIANCEA PERSONAL FIELD GUIDE / 2026
IvandaleFernando.
Security that works.
Readiness that matters.
I’m a Senior GRC Analyst who turns complex security work into clear, practical systems. Now, I’m bringing that mindset closer to incident response.
EVIDENCEMake it clear.
01 — ASSURANCE
Good decisions start with evidence you can trust.
SELECTED IMPACT
A few things I’ve helped move forward.
25
systems connected through
one disaster recovery portal
31
weeks for quarterly
Compliance Week
700+
controls migrated in an
enterprise GRC rollout
01 / SELECTED WORK
Less friction.
More follow-through.
The best systems make it easier for people to do the right thing. These are a few I’ve built to turn security requirements into work that gets done.
AUTOMATION / PROGRAM OPERATIONS
Three weeks.
Then one.
Quarterly Compliance Week, redesigned around automated tracking, reminders, escalations, and reporting.
MAKING ROOM FOR BETTER WORK
ASSURANCE / PLATFORM DELIVERY
A stronger
control foundation.
An enterprise GRC platform rollout, with more than 700 controls migrated and reusable workflows for recurring assurance work.
BUILT TO KEEP MOVING
700+
IDENTITY / DATA RECONCILIATION
Close the gaps
between systems.
Automated comparisons across Azure AD, SailPoint, and source-system data to surface missing or mismatched users in access reviews.
FIND THE MISSING CONNECTION
*From the broader review automation program.
02 / A LITTLE CONTEXT
People.
Process.
A little
PowerShell.
I like making complex security work easier to act on.
At GoTo, I lead SOX ITGC readiness across access management, change management, and IT operations. That means connecting the requirements, the evidence, and the people who keep systems running.
I build practical tools and workflows with PowerShell, APIs, and AI. Just as important, I work closely with system owners, auditors, and teams across Engineering, Security, IT, Legal, and Finance to keep the work moving.
My thread through all of it: bring clarity, make ownership visible, and follow through on the gaps.
TOOLS & TERRITORIES
How I got here
A PATH BUILT THROUGH PRACTICEFEB 2024 — PRESENT
Senior GRC Analyst
GoTo · Remote
SOX ITGC readiness, resiliency governance, automation, and enterprise GRC workflows.
OCT 2022 — FEB 2024
GRC Analyst
GoTo · Remote
Audit coordination, control reviews, operating guidance, and cross-functional follow-through.
JUN — AUG 2022
GRC Intern
Skechers Corporation
Eight third-party risk assessments and collaboration to close more than 25 findings.
04 / THE FOUNDATION
CLASS OF ’22Cal Poly
Pomona.
CALIFORNIA STATE POLYTECHNIC UNIVERSITY, POMONA
Bachelor of Science
in Computer Information Systems
Information Security
Magna Cum LaudeGPA 3.73December 2022
Continuing development: CISA exam preparation In progress
05 / LET’S CONNECT
Let’s build
something resilient.
Security, systems, or the next interesting problem.
I’d love to connect.