Jonathan Abraham

Background

About Jonathan Abraham

I’m a cybersecurity and GRC professional with 10+ years of experience helping organizations strengthen their security posture through effective risk management, compliance strategy, and audit readiness. I specialize in building and managing programs aligned to critical frameworks like PCI DSS and ISO 27001, ensuring organizations meet both regulatory and business security objectives. My background includes hands-on experience performing PCI DSS gap assessments, completing Attestations of Compliance (AOCs), and collaborating with QSAs and stakeholders to close control gaps across complex environments. I’ve also supported enterprise-level ISO 27001 implementations—helping define scope, implement ISMS controls, conduct internal audits, and drive continuous improvement toward certification and maintenance. Beyond frameworks, I’ve worked extensively across third-party/vendor risk, internal and external audits (SOX, HIPAA), policy development, and vulnerability management. I’m also comfortable working across cloud platforms (especially Google Cloud), helping teams understand and secure modern infrastructure. I’m passionate about translating compliance into actionable, scalable security practices. Whether it's leading a PCI engagement or maturing an ISO 27001 program, I bring a balance of strategy and execution to every engagement. Open to new opportunities where I can contribute to building secure, compliant, and resilient organizations.