Kevin Rigo
I work in Governance, Risk and Compliance (GRC), with an increasing focus on IT Risk Management. My role involves identifying and assessing risks, implementing appropriate controls, and ensuring that the organization's security practices can be demonstrated and validated during audits and assessments.
How I got into this: mostly by accident. I've been interested in computers and security since I was a kid, but my career took the scenic route. A few unrelated jobs, a lot of curiosity, and eventually the hobby started paying the bills.
These days I work in vendor and third-party risk, audit readiness, phishing and security awareness programs, and coordinating vulnerability assessments and penetration tests. Lately I've been leaning more into IT risk management: identifying risks early, quantifying them, and getting them in front of the people who can do something about them.
Outside of work, I enjoy photography, play guitar, and listen to a lot of metal. I also share my home with Zoey, a French bulldog who believes she's in charge, and my wife Petra, who may actually be in charge.
frameworks
tools
sectors
ISO 27001 Lead Auditor
ITIL Foundation
Economist, Business Administration and Management
Say hi.
If you want to talk security, risk and audits, or just argue about bands, I am around. I also take on select consulting work from time to time, so if something lines up, feel free to reach out. Easiest to find me on LinkedIn or email.