Aurore Watts Cisa Cipm Cissp Email & Phone Number

San Diego, Ca, Us

Design and delivery of information security compliance program services and activities with Kudelski Security Practice Leaders, Experts, Consultants, and Project Manager.Responsible for the approach and delivery of information security compliance services across a multitude of frameworks and regulations.SRC Engagement Team Lead, responsible for successful delivery of SRC engagements by identifying client needs through discovery meetings and discussions, in collaboration with regional sales teams and other practice members.

San Diego, California, United States

Privacy audit preparation and general privacy program management: support projects related to ongoing compliance with privacy and data protection laws.Assist with diverse privacy legal programmatic initiatives and defining, developing and implementing of privacy software processes.

Remote

23andMe offers direct access to genetic information as the only company with multiple FDA authorizations for genetic health risk reports. The company has created the world’s largest crowdsourced cloud platform for genetic research, with 80 percent of its customers electing to participate. The 23andMe research platform has generated more than 180 publications on the genetic underpinnings of a wide range of diseases, conditions, and traits. The platform also powers the 23andMe Therapeutics group, currently pursuing drug discovery programs rooted in human genetics across a spectrum of disease areas, including oncology, respiratory, and cardiovascular diseases, in addition to other therapeutic areas. Company size: 501-1,000 employees• Responsible for overseeing compliance projects around information security and privacy controls, and compliance audits. Report the Director IT, Risk and Compliance under the Chief Security Officer.• Led compliance efforts against privacy and security frameworks ISO 27001, ISO 27701 (privacy), SOX, HIPAA, GDPR, CPRA and Privacy state laws. Performed gaps and readiness assessments on future applicable compliance frameworks• Led the company risk management program, third party reviews for new and existing vendors, compliance governance, metrics dashboard reporting, and business continuity initiatives. • Led continuous assessment programs to improve controls.• Managed a team of 4 compliance analysts focusing in user access review, system lifecycle, information security and training, SOX implementation, and privacy compliance.• Enhance existing policies, procedures, and guidelines, design new controls and operational improvements related to SOX and other regulatory frameworks.

Remote

Consulting Firm that helps its client to provide proof that they are secure and compliant to key stakeholders to allow them to focus on more important things like growing their business.PPS offers a number of inter-related services:- Help to get certified to trusted information security frameworks like ISO 27001, NCSF, SOC 2, ISO 22301, HITRUST and achieve compliance with important laws and regulations like PCI, HIPAA, & DFS 500, NIST 800-171, and GDPR-Help validate that key networks, applications, and systems are secure by performing vulnerability assessments, penetration tests and gap assessments-Ensure clients manage vendor risk by helping them build and operate Third Party Risk Management programs- Help close resource and expertise gaps in their security organizations by acting as an extension of their teams through our vCISO/VSO services.Company size: 50-100 employees• As part of the GRC team, conducted 12-15 internal audits a year as lead auditor for ISO 27001, ISO 27701 (privacy) and/or SOC2.• Implemented ISO 27001, ISO 27701, CCPA, GDPR or SOC 2 as lead implementor for 5-10 clients a year who successfully reached certification, attestation and compliance.• As part of the implementations: led gap assessment discussions, prepared risk assessment and treatment plan, monitored remediation plan, established policies, led implementation team, and supported during external audit.• Privacy service Lead: defined and led privacy service offerings. Provided Data Protection Officer (DPO) consulting and training. Prepared record of processing activities (data mapping) and data protection impact assessment, established policies and monitored remediation efforts to reach compliance under applicable privacy laws: ISO 27701, HIPAA, CPA, GDPR.

TriNet provides small and medium-size businesses with full-service HR solutions tailored by industry. To free SMBs from HR complexities, TriNet offers access to human capital expertise, benefits, risk mitigation and compliance, payroll and real-time technology. Company size: 1,001-5,000 employees• Reported directly to the Internal Audit IT Director, responsible for managing IT, Compliance and Security audit projects. Created the Audit Program to remediate the material weaknesses: IT internal audit scope and procedures, and methodology for the Company’s SOX Audit, compliance reports and security reports: CyberSecurity, Privacy, Data Governance, Risk and Capability Maturity Assessment.• Collaborated with IT, Finance, Legal and Compliance teams to drive timely achievement of objectives. Drove to completion and improved reports quality via timely detailed review.• Coordinated resources to obtain management assessments of internal IT controls, including the identification of weaknesses and opportunities for improvement. • Provided assistance to internal and external auditors for SOX, Risk Assessments, Security Gap Analysis, system implementations and compliance projects.• Managed the development and maintenance of working papers to support, substantiate audit observations and ensure on-boarding and availability of tools.• Manage all phases of the audit process including planning, fieldwork, closeout, report writing, wrap-up, follow-up and audit policies documentation.• Assisted audit management periodic reporting to the audit committee, development of the annual internal audit plan, and championing internal control and corporate governance concepts throughout the business.

• Performed numerous IT general control assessments in support of financial audits. Such activities include walkthroughs/testing of controls related to the Change Management, Logical Access, and IT Operations (i.e. Backup and Recovery) processes, as well as various application controls. Documented and evaluated control design, tested operational effectiveness of controls, and identified deficiencies for client remediation. • Performed client interviews, process walkthroughs, change management and application control testing relating to security configurations, and user administration, and for the PeopleSoft, Oracle, SAP, JD Edwards , Oracle Database, UNIX, OS/400, and Windows during Sarbanes-Oxley 404 internal audit engagements. • Evaluate controls relevant Service Organization Controls (SOC 1 and SOC 2) and ISO 27001 reports. Identify and remediate process weaknesses and control gaps for Fortune 500 technology companies and international cloud service providers• Manage a team of 1-5 staff members. Responsible for planning, resourcing and budgeting• Documented business processes dependant on information technology. Demonstrated and applied a thorough understanding of complex information systems.Industry Experience:TechnologyLife Sciences

Région De La Baie De San Francisco, États-Unis

• Email Campaign Management• Ecommerce Specialist: manage CRM effort• Business Development responsible for managing Publishers and Advertisers• Collected US Business requirements and translated them for Developers based in France : Localization Project

Région De Toulouse, France

Project P8 for AIRBUS–CAPGEMINITransfer of ERP systems between Airbus and Kühne Nagel/ DHL as part of the Project Power 8. The aim is to externalise the supply chain and logistics management among Airbus plant sites around Europe. • Completed blueprinting, process re-engineering, testing & GoLive milestones for AIRBUS project• Led workshops to capture business requirements, prepared functional specification documents, executed scenario testing and trained end-users to support change management effort

Région De Toulouse, France

Support for buyers in term of business analysis and sourcing solutions.• Provide dashboards to evaluate risks for critical suppliers.• Measure suppliers’ performance to reduce the suppliers’ database

Taipei Taiwan

• Adexa Certification Training for their data model, planning logic and ERP software.• Pre-sales team to implement Adexa ERP in companies• Testing of a new Production Planner solution for upcoming Golive.

Région De Greater Philadelphie, États-Unis

• Project to launch a new product dedicated to improve a new tennis teaching method• Negotiation with suppliers for the prototypes’ production et transportation

Région De Toulouse, France

• Optimize the pallet’s and truck’s physical flow• Entered customer orders and transportation receipts in SAP• Manage follow-up of the client and subsidiaries relationships

Région De Nice, France

• Reception of orders and establishment of the truck’s schedule