Carolina Pinto

Cybersecurity GRC Analyst · Risk, Compliance & Governance

Hi, I'm Carolina.

GRC-focused cybersecurity professional bringing 10+ years of legal, financial-services and compliance experience to security risk.

Helping organizations turn regulation into practical security.

Google Cybersecurity Certificate CompTIA Security+ (Dec 2026) LL.M., Fordham Law English · Portuguese · Spanish
View my projects Resume About me

Featured projects

All 23 projects →
Governance, Risk & Compliance NIST CSF 2.0 Gap Assessment: Meridian Wealth Partners Assessed a simulated wealth management firm against all six NIST CSF 2.0 functions and recommended prioritized remediation. View project Governance, Risk & Compliance Third-Party Vendor Risk Assessment: ClientVantage CRM Evaluated a SaaS CRM vendor holding UHNW client data ahead of contract renewal, using SOC 2 Type II evidence and a vendor questionnaire. View project Governance, Risk & Compliance Internal IT Security Audit: Botium Toys Controls and compliance assessment using NIST CSF, with recommendations to reduce risk and meet PCI DSS, GDPR and SOC requirements. View project Risk & Threat Assessment Vulnerability Assessment Report: Public Database Server Assessed access-control risks on a publicly exposed MySQL database server using NIST SP 800-30 Rev. 1. View project Risk & Threat Assessment PASTA Threat Model: SoleTrade App Applied the seven-stage PASTA framework to a sneaker marketplace app, from business objectives to attack vectors and mitigations. View project Incident Response Incident Report: ICMP Flood DoS Analyzed a two-hour outage caused by an ICMP flood and documented it across the NIST CSF functions. View project

Areas of focus

Governance, Risk & Compliance5 projects · Framework assessments, audits, vendor risk and control reviews. Risk & Threat Assessment3 projects · Vulnerability analysis, threat modeling and threat intelligence. Incident Response4 projects · Investigating, documenting and recovering from security incidents. Network Security3 projects · Network design, scanning and packet analysis. Python & Automation6 projects · Python scripts that automate everyday security tasks. Linux & SQL2 projects · Command-line administration and querying security data.

Latest from the blog

All posts →