Alycia Steiner, Cisa, Cipp Us, Cipm, Fip Email & Phone Number

Corporate Development Leader and Junior Board Founder:- Executive Board member dedicated to the mission to provide speechtherapy, community and other main stream services to children who aredeaf and hard of hearing- Corporate Development leader - created sponsorship program andcorporate development leads database in 2023 which led to over $1 million innew corporate sponsorships in first year- Founded Junior Board in June 2023 and recruited 10 members to drivefundraising, social media and source the next round of Executive Boardmembers

Worldwide, Oo

• Leader in AI, data governance, security, privacy and data protection practice running multi-million-dollar global strategy and transformation projects for Fortune 500 clients largely in the Tech, Fin-tech and Financial Services industries• Expert in Cyber and IT Risk management frameworks (i.e., SOX, ITGC, COBIT, SOC1, SOC2), Security frameworks (i.e., NIST cybersecurity framework ISO 27001) and Privacy regulations (i.e., GDPR, CCPA, CPRA, GLBA, HIPAA, ISO 27701 etc) • Partner with clients to implement innovative and mature end to end strategic data governance, security, privacy and AI risk management programs (including areas such as Security & Privacy Policies/Procedures, Security & Privacy Risk Assessments, Data Inventory, Third Party Risk Management, Cookie Management, Consent & Preference Management, Individual Rights, Incident Response, Audit and Monitoring, Metrics and Reporting etc.)• Super connector excelling in building and growing relationships with Senior Executives across the organization including CPO, CDO, CIO, CISO, CTO, CMO, CHRO, CRO, CLO/GC and more• Founded Deloitte’s alliance with OneTrust closing over $30 million in OneTrust implementation engagements for over 40 clients implementing the Assessment Automation, Data Mapping and Discovery, Cookie Management, Universal Consent and Preference Management and GRC modules. Expertise with BigID, Securiti.ai and other tech solutions• Leader of high performing team members of 30+ global team members per engagement with diverse skillsets in legal, compliance, engineering, IT, audit, project management, etc• Experience with regulator audits and reviews and working closely with external counsel• Founded the Rocky Mountain Women in Cyber Chapter leading various panels, training and safe space forums to improve retention of Women in leadership roles• Founded and act as lead facilitator of quarterly Chief Privacy Officer roundtables for the FSI and TMT industries with over 60 CPO executives

Worldwide, Oo

- Executive Board member advancing social progress in the fight to endchild abuse and neglect- Part of start - up not for profit organization managing financial decisions,hiring decisions, firing decisions, expansion efforts to new markets,grant reviews and more

Riverwoods, Il, Us

Oversight of Privacy Program monitoring compliance on consumer and employee privacy and customer contact preferences.

Riverwoods, Il, Us

• First ever Privacy and Non-Solicitation SME champion at the enterprise-wide level (manage privacy compliance for all DFS products: Discover Card, Discover Business Card, Discover Student Loans, Discover Personal Loans, Discover Home Loans, Discover Home Equity Loans, Legacy Mortgages, Mobile and OBA)• Built new Privacy Program Framework from ground up• Oversee and Chair Privacy & Do Not Solicit Enterprise Task Force of Business Partners across the enterprise • Oversee Privacy Committee of VPs across the enterprise• Provide strategic vision for ways to incorporate consumer Privacy efforts to promote transparency and choice to maintain consumer loyalty while also increasing potential marketing opportunities and business growth• Analyze and report Key Risk Indicators metrics displayed in a monthly Scorecard for the Privacy and Compliance Committees• Monitor and test Privacy and Non-Solicitation risks and controls across the enterprise• Established first ever annual Privacy training and rolled out across the enterprise• Develop and conduct Privacy Impact Assessments to ensure concept of Privacy by Design is infused in projects where consumer PII is impacted/handled/etc.• Oversee the creation/updates of all Privacy policies, procedures and statements• Track all Privacy related incidents/data breaches and action plans to re-mediate• Conduct Privacy related vendors' Risk Assessments• Review all data release requests external to DFS to ensure personally identifiable customer information is secure and contracts with third parties are in place defining Privacy responsibilities/liabilities• Review and track consumer Privacy and Do Not Solicit related complaints• Current knowledge on Financial and U.S. Consumer Privacy laws and regulations – GLBA/Reg-P, FCRA/FACTA, TCPA, TSR, CAN-SPAM

Chicago, Illinois, Us

• Provided corporate governance, risk management, internal audit, and Sarbanes-Oxley IT consulting services in the financial institution, not for profit, manufacturing/distribution, and technological industries• Focused substantial time in assisting publicly traded companies comply with the requirements of the Sarbanes-Oxley Act of 2002, with significant specialization in Section 404• Helped clients develop and implement the requirements needed for their SSAE 16/SOC engagement reviews. • Audited many different systems and applications including but not limited to Dynamics AX, SAP, Jack Henry, JD Edwards, Oracle, FedLine Advantage, ADP, Metavante, AS/400, Windows, Novell and SQL• Determined and managed audit scope, hours, fees (engagement and travel) and staffing needed • Main liaison with the client, making sure all requested items were sent and clear, answering client questions, settling client disputes for clients at staff through C-level executive roles• Responsible for the supervision and review of 1-6 associates on multiple engagement teams by daily coaching them through the audit approach, describing best practices in the industry and communicating audit issues discovered in order to deliver a high quality work product• Committed to meeting client deadlines by driving efficiency through organization and multi-tasking techniques in a fast-paced environment• Developed training materials and trained all levels of employees (Staff through Partner) in both the IT and Financial Audit groups at Crowe• Member of internal council of 10 people to help improve work/life balance and employee morale and satisfaction for whole Risk Consulting Practice (300+ employees)

Chicago, Illinois, Us

Chicago, Illinois, Us

Participated in conducting financial audits for seven different clients in the manufacturing/distribution, healthcare, not-for-profit and construction industries. Audited nearly every aspect of the financial statement including: Accounts Payable, Cash, Other Income and Expense, Fixed Assets, Other Liabilities, Prepaid Expenses, Related Parties, Inventory Price Testing, Journal Entry Testing, Reporting, etc.

Riverwoods, Il, Us

Participated in planning and conducting complex operational and financial audits at Discover Financial Services including the following: Physical Security and Personal Safety, Discover Card Open File Processing (the collection process for delinquent card payers), Discover Network – Authorization Data Processing (connectivity, data flow and data security during the authorization process of a transaction) and Monthly Close.Analyzed control environments; documented findings and recommendations and presented them to management.

Washington, District Of Columbia, Us

Certified by the IRS to work as a volunteer to assist low-income individuals in preparing their tax returns.

Deerfield, Illinois, Us

- Used RPM (Rational Portfolio Manager) to analyze efficiency of project reporting and budgeting-Acted as a consultant and trained employees with RPM software and documented SOPs-Worked with the Enterprise Architecture team to implement new Global Software Inventory System website which incorporates all software utilized at Baxter-Worked with Law IT team to research Financial applications (Hyperion Enterprise, JDEdwards, Cognos Planning & PowerPlay) and data flow-Performed inventory of system backup tapes and retention policies

Fort Lauderdale, Florida, Us

Worked as a cashier, opened credit card accounts, stocked new inventory, performed inventory checks, rearranged and created visual sales displays, helped train new employees.

Bs, Accounting, Management Information Systems

Education record