Senior GRC Manager
Robyn Ferreira is a Senior GRC Manager with extensive experience in information security, risk management, and regulatory compliance. Her passion for information security was sparked during her time at the U.S. Embassy & Consulate General, where she served as an Information Security Assistant and gained hands-on experience in secure data handling and InfoSec protocols. At Scytale, Robyn leads a high-performing GRC team and works directly with organizations to meet strict compliance requirements across major frameworks like SOC 2, ISO 27001, and PCI DSS.
She is recognized for her ability to apply industry best practices, translate complex regulatory demands into clear, practical steps, and help companies build compliance programs that scale with their growth. Robyn holds a Bachelor’s degree in Political Science with a specialization in International Relations, a postgraduate qualification in Risk Management, and is an ISO 27001 Certified Lead Implementer.
Learn the key differences between RFPs and security questionnaires, when to use each, and how to streamline vendor assessments.
Discover how NIST password guidelines evolved to prioritize longer, user-friendly passwords, boosting security for 2025.
The Risk Management Framework is a process that assists businesses in identifying, evaluating, and mitigating potential risks.
Here’s what you need to know (and do) to ensure your organization has a strong SaaS security posture for 2025.
Learn how SaaS businesses can navigate PCI DSS controls to ensure compliance and protect cardholder data effortlessly.
Leverage the full potential of Large Language Models (LLMs) for your business while staying compliant.
An Information Security Management System (ISMS) is key to safeguarding your business and protecting sensitive data.
Dive into this blog to find out why early-stage startups need to prioritize compliance to attract investors and mitigate risks.
ISO 270001 or SOC 2. Which is right for your business? It’s a common question.
Explore essential risk assessment methodologies to safeguard your organization and find the best fit for your needs.
Change the way you’re answering security questionnaires and learn how to leverage effective security questionnaire automation.
This blog discusses the essentials of PCI DSS compliance, and the 5 best practices for maintaining compliance.
