Mary Owusu is a seasoned Information Security and Compliance Analyst with a wealth of experience spanning various aspects of cybersecurity, risk management, and governance. As an instructor at Schnell Academy, she brings her extensive knowledge in compliance frameworks and security practices to educate and guide students in the evolving field of cybersecurity. Expertise: Information Security & Compliance: Mary has in-depth expertise in aligning security policies with regulatory frameworks such as FISMA, NIST 800-37 RMF, NIST 800-53, PCI DSS, ISO 27000 Series, HITRUST CSF, and SOX. She is well-versed in implementing security controls and compliance processes to meet industry standards. Risk Management: Certified in CRISC, she is proficient in managing risks related to information security and compliance, having worked extensively with frameworks like NIST, POA&M Management, and Continuous Monitoring practices. Cybersecurity Operations: With a strong foundation in vulnerability management, cryptography, DLP (Data Loss Prevention), and security operations, Mary is knowledgeable in both offensive and defensive security strategies. Her familiarity with cloud security models for AWS and Azure enhances her ability to teach modern security techniques and deployment methods. Professional Experience: Mary has held several prominent roles, including Information Security Compliance and Risk Manager at Oasis and Lead GRC Security Analyst at Rhinestone Healthcare. She has a proven track record in auditing, managing third-party security services, and creating security artifacts for compliance audits and assessments. Educational Background: Mary holds an MBA from Southwestern Oklahoma State University and a Master of Social Work (MSW) from the University of Texas at Arlington, further showcasing her diverse skill set in management and communication. At Schnell Academy, Mary’s courses focus on Governance, Risk, and Compliance (GRC), vulnerability management, and security frameworks, equipping students with the practical skills necessary for today’s security landscape.