Amanda H. Email & Phone Number

Palm Beach Gardens, Fl, Us

Cleveland , Ohio, Us

Team lead for the PCI Office for KeyBank. The PCI Office is responsible for governing the PCI Program and assisting lines of business with daily PCI compliance activities.• Successfully led the first Report on Compliance (ROC) for operations in partnership with outside QSA; oversees continued compliance for future ROC assessments.• Performs analysis on the current PCI program compared to the twelve requirements of the Data Security Standards (DSS) 3.2 and determine gaps and/or upgrades as needed.• Critical member of the PCI upgrade project which will ensure compliance with PCI DSS 3.2 throughout the bank.• Ensures and verifies KeyBank’s third parties, with access to credit card data, are complaint with PCI DSS.• Disaster recovery line of business tester for internal credit card tokenization tool.• Performs access control verifications and approvals for those individuals needing access to the PCI zone.

Cleveland , Ohio, Us

Manager of the Third Party Security (TPS) team for KeyBank. The TPS team is responsible for both initial and ongoing security reviews of KeyBank’s most critical third parties.• Effectively managed the TPS team which consists of Information Security Consultants and Senior Consultants through extensive leadership and organizational changes without compromising work performance or reporting.• Communicated productivity results and emerging issues via monthly reporting to executive management and the Board of Directors.• Trained and developed new staff in performing security reviews, site visits and overall enhancement of their information security skills.• Partnered with numerous risk groups throughout the bank to streamline enterprise risk and information security tolerance reporting.

Cleveland , Ohio, Us

Ongoing Monitoring and Assessment (OMA) process owner for KeyBank. The OMA process incorporates information security reviews for all 400+ managed vendors.• Designed the OMA program to incorporate all vendor risk levels. This included merging two existing vendor management processes and functional teams, into one concise and structured organization.• Performed detailed site visits for high risk vendors and communicated results through management reporting. • Assisted with vendor management system migration to the Archer GRC platform. Activities included requirements design, UAT and defect remediation efforts.• Assisted in numerous technology regulatory exams as well as both internal and external audits.

Cleveland , Ohio, Us

Vendor Information Governance (VIG) Administrator for KeyBank. Managed the VIG Team and review process of more than 300 vendor assessments for all lines of business.• Created and maintained the Controls Assessment Questionnaire (CAQ); a collaborative, emerging trend security questionnaire distributed to vendors to assist in the identification of security gaps. • Developed and facilitated information security training for various roles within the vendor management process.• Performed vendor reviews and opined on ten technology domains including Application Security, Business Continuity and Recovery, Change Control, General Information Security Controls, Network Security, Platform Security, Physical and Logical Access, Privacy and Remote and Mobile Access.• Performed analysis on vendor SSAE16 SOC1 and SOC2.• Facilitated remediation efforts for critical security gaps identified during the vendor review process.

Cleveland , Ohio, Us

Risk consultant to KeyBank’s Technology and Operations division. Facilitated the development, implementation, and promotion of internal controls & information security awareness within KeyBank’s Technology and Operations (KTO). • As Vendor Coordinator for Client Services Group (CSG), developed CSG’s vendor management process and associated risk mitigation strategies, which have ultimately been implemented across the corporation. • Decreased budgetary salary spending by over 65% due to a review of staff utilization and sustainability.• Built and sustained collaborative relationships, at various levels, in efforts to improve internal controls and compliance across the corporation.

Us

Compliance Manager for the National Home Equity (NHE) division, responsible for performing and analyzing compliance reviews and creating sustainable solutions to mitigate risks and identified exceptions.• Created effective monitoring programs to examine and assure regulatory and in-house compliance guidelines were followed.• Documented workflow processes to identify procedural or regulatory gaps / inefficiencies and implemented solutions to issues identified.• Monitored Broker and Settlement Agent activity in pilot programs to streamline Settlement Agent activity and reduce costs to both the customer and the bank.

Us

Senior Internal Auditor specializing in operational and mortgage related audits. Reviewed and performed critical testing for internal and external audits.• Effectively communicated audit issues and recommendations to clients and senior management while maintaining and building positive working relationships.• Led successful teams of staff auditors in completing numerous audits within established budgetary timeframes.• Ensured proper documentation and adequacy of loan loss reserves according to board policy.• Identified calculation errors prior to regulatory and external audit review.• Reviewed extensive documentation and client information while performing several audits such as Commercial Loan Operations, Investment Real Estate, Small Business, Loan Servicing, SOX reviews and other regulatory examinations.• Actively involved in recruiting, mentoring and training of incoming Audit Development Programs (ADP) classes.• Successfully completed the Audit Development Program

Mba, International Management And Organizational Behavior

Bba, Accounting