Annie Miller Email and Phone Number

• Leading a GDPR readiness project to implement and operationalize GDPR requirements for SoFi.• Developed internal Privacy policies and procedures including Data Subject Rights, Privacy Impact Assessments, and Privacy by Design.• Conducted the annual enterprise Privacy risk assessment.• Implemented Privacy by Design and Privacy Impact Assessmentprograms for complex existing and new products.• Developed and rolled out annual Privacy training and awarenessfor the organization.• Enhanced the existing Data Protection Policy to include moredetailed handling requirements.• Developed role based data handling training for specific jobfunctions.

Compliance framework experience includes ISO 27001/2, China Cybersecurity Law, GDPR, and the HIPAA Security Rule.Performed compliance readiness assessments against ISO 27001, and the HIPAA Security Rule for an industry leading corporation within the field of technology. Assessments included program structure and control evaluations, prioritized remediation recommendations, and curated guidance on best practices. Conducted technical Cybersecurity tabletop exercises using real world examples and custom environments to help clients test their Incident Response plans and GDPR notification process.

- Project lead for internal SOC2 Readiness assessments; which included working with a Big 4 firm to complete the System Description and control matrix. Drove identified gaps to completion.- Led a PCI DSS assessment where responsibilities included collecting evidence, owning remediation efforts and managing relationship with QSA. - Supported an internal Risk Assessment over company-wide Sensitive Tools and evaluated what access controls needed to be in place to protect these tools.- Worked cross-functionally to create Policy wikis in the areas of user access, vendor management, Penetration testing methodology, key management for Payments, and more.

Developed a web based portable health log application for the iPhone. The health log was designed to improve the quality and flexibility of elderly patient's health care.