Amy Brock Email & Phone Number

New Jersey, United States

United States

 Accountable to successfully support client engagements related to cybersecurity assessments, cyber risk management, and technology risk management through coaching team members, developing deliverables and building trusting client relationships. Responsible for reviewing deliverables as a subject matter specialist who understands various regulatory compliance requirements and industry frameworks including: FFIEC, GLBA, NY DFS, NIST CSF, NIST 800-53, COBIT, HIPAA, COSO and PCI DSS. Designed and documented cybersecurity and technology risk programs using industry frameworks and methodologies to help clients solve problems and drive remediation efforts. Assessed controls (e.g., Access Management, Governance, Disaster Recovery, Incident Response, Networking, etc.) to support clients in their security maturity journey. Accountable to leverage tools and technology to provide data analytics and business intelligence related to risks, threats, and vulnerabilities. Developed communications Worked with regulatory examiners, investigators, and industry leaders to stay ahead of upcoming regulatory changes and/or enforcements developing communications to stakeholders.

Golden Valley

 Successfully led and supported client engagements related to cybersecurity, cyber risk management, and technology risk management through to completion. Monitored Supplier (TPR) Information Risk Governance (SIRG) QA dashboard, within the eGRC reporting tool, to maintain quality control.  Anticipated customer needs, proactively developed solutions, provided explanations, and shared additional information customers needed on complex risk related issues to achieve compliance and resolve open audit items. Developed strong relationships with business partners and control owners by preparing and educating them on requirements and expectations for IT risk assessments and IT security protocols.  Managed the administration of the Optum/UHG instance of the HITRUST Common Security Framework tool (MyCSF). I spent the last year and a half working specifically in the Operations department full time continuing the development and overseeing the HITRUST tool administration. Consulted with the HITRUST security/development team to work through upcoming changes, improvements, and customizations in the MyCSF tool and how those changes impact Optum/UHG. Many of my ideas for improvement or customizations of the tool were adopted by HITRUST for Optum as well as the overall HITRUST tool, improving the MyCSF tool and increasing efficiencies for the audit teams. Oversaw and led system administration for all aspects of the MyCSF tool including access controls, SOD issues, and updating information on the Optum site page.

Eden Prairie

• Monitored and addressed system alerts (i.e., Down Servers, Backup Alerts, Critical System Alerts).• Solved problems by utilizing training, knowledge, tools, and analytical skills while processing cases.• Provided a high degree of customer satisfaction, technical expertise, accuracy, and timeliness.

Bachelor Of Applied Science (Basc), Infomation Technology, 3.5 Gpa

The skills I have learned through my education are: Database Implementation, Systems Analysis and Design, Information Security, Networking.

Diploma, Cabinetmaking And Millwork