Angel Ramirez
GRC & IT risk
Loading portfolio
IT Manager · GRC & IT risk
I assess security risks and implement practical controls. My experience connects a company-wide NIST CSF 2.0 assessment with risk documentation and hands-on remediation.
Based in Ontario. Pursuing GRC & IT risk roles in Toronto and across Ontario.
Selected work
Professional experience first.
Clear scope. No confidential findings.
Professional experience · Featured
Identifying security gaps, establishing a risk register and implementing improvements across a multi-site organization.
Read the case studyProject overview
Hands-on implementation and operation of the controls behind access governance, network protection and recovery readiness.
Network and endpoint-security deployments with clear validation, documentation and handoff to an MSP.
Applied learning
Simulated and illustrative work,
separate from professional engagements.
Simulated coursework
A coursework overview covering ISMS scope, risk treatment, a Statement of Applicability and simulated audit documentation.
Simulated coursework
Coursework on supplier classification, security questionnaires, risk-rated findings and remediation recommendations.
Illustrative work sample
Fictional examples showing a clear link between risk, ownership, evidence, testing and remediation.
Experience
I bring hands-on knowledge of the systems behind security controls, alongside assessment, documentation and stakeholder communication.
Full experience in my resumeVerduyn Tarps Inc. · Hamilton, Ontario
Company-wide NIST assessment, risk register development, security policies, identity and network controls, recovery readiness and remediation coordination.
IT Harbor · Independent Contractor
Network and endpoint-security deployments for dental clinics, with validation, clear documentation and MSP handoff.
Verduyn Tarps Inc. · Hamilton, Ontario
Identity administration, infrastructure support, patching, backup restoration and operational documentation.
Geek Squad / Best Buy Canada · Hamilton, Ontario
Technical support, malware remediation, system hardening and clear communication with residential and small-business clients.
Credentials & development
Completed learning and planned development, with their status kept clear.
GRC Mastery · September 2026
Google · June 2026
Qualys · June 2026
Planned professional development. Certification not yet earned.
Technical foundation
Microsoft 365 & Entra ID · Active Directory · FortiGate & IPsec VPNs · Hyper-V & Synology · Nessus & Qualys · SentinelOne
Contact
I’m interested in GRC, IT risk and security compliance opportunities in Toronto and across Ontario.