Adam Leigh Email & Phone Number

Morrisville, Nc, Us

Holly Springs, North Carolina, United States

Save Point is creating exciting pop-up retro gaming events and entertainment centers in Holly Springs. We bring our collection of retro arcade games and pinball machines to your private event, birthday, or town festival in southern Wake County, North Carolina.

Global Risk Management and Business Continuity Expert> Led international teams to manage technology risk, building a program deeply integrated with Information Security from the ground up in consultation with senior leadership. Expertise in risk assessments across vendors, applications, infrastructure, projects, and critical incidents. Organized and executed annual Disaster Recovery and Ransomware Simulations to enhance security preparedness.Risk Reporting to Executive Leadership> Provided content for Audit Committee and Executive Leadership Team presentations on Information Security and Internal Audit. Produced annual report Cybersecurity Enterprise Risk Assessment and biannual report on Cybersecurity Maturity Assessment using C2M2.AI Governance Committee Representative> Represented the CISO on the AI Governance Committee, evaluating AI tools' use and configuration.Bridge Builder> Primary point of contact for teams outside of Information Security, fostering collaboration and effective communication. Represented R&D and security teams on sales calls with potential and current customers. Collaborated with the Privacy and Ethics team on information governance, privacy, security, and international regulatory privacy law compliance.Contract Work> Reviewed contracts with vendors and customers that deviated from established templates on security topics.Special Projects Leader> Managed complex Information Security projects across different department groups including performing M&A due diligence reviews for acquired companies.

Morrisville, Nc

Owns the Technology Risk Management and Business Resiliency programs at Align, establishing the Risk Framework, operating programs to identify, document, assign ownership, and shepherd the mitigation of technology risk. This program is extended into overall enterprise resiliency, managing the assessment of business process BIAs, creation of Business Continuity Plans and Disaster Recovery Plans, orchestrating exercises to test both sets of plans, administering the Business Continuity tool, and managing the closing of gaps between expected and actual RTO. Evaluates all technology vendors used by the Company, and represent the company to it's customers with respect to data confidentiality and other aspects of security of the products and services the Company offers. Product owner, admin, and development support for ServiceNow GRC/IRM tool.

Cary, Nc

Directs activities of the IT Risk Guidance and IT Risk Framework teams to support the clear and effective monitoring and communication of IT Risks and advise or direct management strategies to respond to that risk across IT and the Enterprise. Supports the execution and issuance of over a dozen audit reports annually coordinating activities between IT, Enterprise Risk, Internal Audit, and External Audit. Owns and executes the IT Risk Finding program to document and track technology risk; manages the creation of monthly and quarterly reporting of enterprise risk; monitors and manages response to audit issues in Security and Infrastructure; and member of operational risk management committees.From May 2018-September 2018: Directed IT Risk Management activities and supported the VP of Risk Management Strategy & Governance (which includes Application Security and US IT Compliance) after the departure of the AVP of Risk Management.

Cary, Nc

IT Risk Governance/Operations - Managed teams responsible for the examination, assessment, monitoring, and communication of IT Risk to all levels in the enterprise including IT and the customer-facing business both in the United States and in the 40+ other countries that MetLife operates in. Included in these responsibilities is the governance of the IT PRC, supporting internal, external, and compliance audits, and participating in risk committees.* Created and implemented IT Process, Risk, and Control Framework* Designed and deployed IT Risk Severity framework and calculator* Designed and deployed Enterprise IT Risk Assessment and Application Risk Assessment* Developed and reported on IT Risk Appetite Statement* Managed or executed thousands of risk assessments over vendors, applications, regional IT processes

Amelia, Oh

Determine direction of IT Audit group within Internal Audit including the activities of IT Audit at two additional sister companies that have no IT Audit presence. Includes hiring decisions and contracting with staffing agencies to provide temporary support.Determine what audits to perform, manage the activities and reporting of those audits with all business units including IT, and discuss results with multiple VPs, the CFO, and the CIO, explaining results where appropriate.Coordinate with Financial audit teams at each company and Group Audit at parent company, Munich RE, as well as Risk Management teams at each company. Contribute to discussions on the role of IT Audit for Munich RE's North American region, including definition of the IT Risk Assessment, and how to approach testing of regionally shared controls and service centers.Responsible for increasing output of IT Audit department over 400% in the first year as manager while simultaneously increasing quality of audit work and reports, and improving relationship with the IT Department.Subject Matter Expert on SOC1 audits, assisting business units in the selection of audit firms, initial planning, and providing support during testing.

Managed an estimated $1M infrastructure replacement project of IBM WebSphere Process Server with Apache Camel java solution to save $250k/year in costs. Developed project plan, SDLC documentation, and managed team, hours, budget, and risk register. Delivered on time and significantly under estimate.Developed IT Services Model for site with input from site CIO and his direct reports, published to regional IT management.Simultaneously managed 5 infrastructure application/OS upgrade projects over six months.Brought in to recover damaged relationship between business and telecommunications group over previous project mismanagement. Greatly improved relationship and level of communication within three months.Developed SharePoint governance and usage model for department. Managed creation of internal policy management system on SharePoint.

Responsible for developing audit plans, executing those audits, concluding on the results, and reporting those results to management and executive management including C-suite. Monitors several on-going initiatives including several major software development projects, and readiness simulations of business recovery and IT recovery plans.Principal IT controls auditor for compliance audits, integrated audits, and system development audits.Redesigned the technical controls framework for compliance audits and defined the IT Audit Universe.

Cincinnati, Ohio Area

Elected to lead the Greater Cincinnati ISACA Chapter Board by organizing meetings, monthly chapter events, semi-annual training events, and other chapter events. Also coordinates with other professional associations in the Greater Cincinnati area, other ISACA Chapters in the region, and with ISACA International.(Resigned as a result of a move out of the Cincinnati area.)

Cincinnati, Oh

Maintain meeting minutes, record board voting, contribute to discussions on chapter decisions and direction.

Cincinnati, Ohio Area

Performed in a supervisory role on 6 controls audit projects of Fortune 500 companies.Designed major aspects of internal control framework for 2 companies.Lead a team of four in the assessment and creation of a formal Disaster Recovery Strategy and Recovery Assessment documents for a Fortune 20 company.Performed testing in 6 Sarbanes-Oxley 404 Audits in the area of Application Security and Change Management Controls at 1 Fortune 500 company, 1 major university, and 4 Philadelphia-area hospitals.Provided support to a PwC Director in redesign of IT department operations and staff based on the new organizational model and strategic plan.Contributed to the development of the initiative prioritization methodology for a healthcare system's long term operating plan.Created multiple formal documents, presentations and proposals for projects valued at $15-30 million.

Developed a web-based online conferencing and audio streaming service using largely open source technologies on a Linux platform. Designed web interface and back-end audio streaming functionality.

Provided technical support for RIT's suite of online classroom software. Responded to domestic and international calls for support. Developed online database support and modification portal in ColdFusion.

Provided materials collection and distribution support for several nationwide internal education seminars and training programs in Pasadena, CA; Dallas, TX; Fort Worth, TX; and New Brunswick, NJ. Acted as first contact for hotel personnel at Pasadena, CA training.