NM Nicole Montes

Cybersecurity • GRC • Risk Analysis • Investigations • AI Evaluation

Cybersecurity-focused risk analyst specializing in access governance and security risk review.

I bring 7+ years of experience in risk investigations, access governance, and quality assurance from Amazon’s API risk environment. My work focused on evaluating third-party access to sensitive data, enforcing least privilege, identifying control gaps, and supporting secure decision-making. I am pursuing a B.S. in Cybersecurity and Information Assurance at WGU and preparing for Network+.

50% Reduced escalations
96% Maintained quality adherence
API Access Reviewed API access requests involving sensitive customer data
Remediation Supported policy alignment and control-gap follow-up
Portrait of Nicole Montes

What I Bring

Access governance and third-party API risk review in sensitive data environments
Investigations, evidence review, escalation handling, and risk decision support
Quality systems, calibration, SOPs, and training programs that improve decision consistency
AI evaluation workflows using structured review, feedback quality, and policy alignment

Introduction

Professional summary

My portfolio is centered on cybersecurity-aligned risk analysis, access governance, investigations, quality systems, and AI evaluation. The work connects operational risk judgment with security control thinking: reviewing access, identifying gaps, improving consistency, and documenting defensible decisions.

API Access Governance

Third-party access review, least privilege, business justification, and sensitive data exposure analysis.

Risk Review & Escalation

Evidence-based decisions, control-gap identification, remediation follow-up, and stakeholder alignment.

Quality Assurance Systems

Calibration, QA programs, SOP development, training, and consistent review standards.

Investigations & Decision Support

Fraud pattern review, account risk analysis, escalation handling, and high-judgment workflows.

AI Evaluation Workflows

Structured review of model outputs, feedback quality, safety alignment, and repeatable evaluation processes.

Contact

Start a conversation

Use the form below to reach out about cybersecurity, GRC, risk, AI evaluation, or related analyst opportunities.

Contact details

Location

Work style

Remote, hybrid, and Seattle-area opportunities.