PCI Compliance• Successfully led the 2024 yearly PCI audit for the Disney Entertainment segment (Hulu, Disney Streaming, and ESPN+). This assignment included gathering evidence on over three hundred requests from PCI assessors/QSAs to address PCI 4.0 requirements.• Completed a PCI inventory of in-scope Disney Streaming services and applications for fiscal year 2025.• Updated Targeted Risk Analyses (TRAs) for nine new PCI 4.0 requirements that come into scope in March 2025.• Created two new PCI process documents to address PCI Security on AWS services and PCI Firewall/Router/NSC configuration review procedures.• Populated inventory records and compliance engagements for an upcoming Archer migration.Technical Writing• Maintain approximately 50 existing SOX and PCI dataflow diagrams in Lucidchart (sample here). Submit these to developers for technical reviews on a quarterly basis and implement recommended changes.• Created approximately ten new diagrams to address new and updated streaming functionality and services.• Created team pages for the Tech Compliance the Studios Cyber teams in WordPress and Confluence.• Created a SOX Application and Service list, which includes descriptions and links to relevant resources for over 200 SOX-related assets used in Disney Streaming/Hulu systems.• Walkthrough potentially outdated SOX process documents and make necessary content updates.• Lead the 2024 yearly PCI audit for our Global Information Security team on the Hulu side. This assignment included gathering evidence on over two hundred requests from PCI assessors/QSAs to address PCI 4.0 requirements.

• Created the Data Stewardship Committee Charter for George Mason's Data Governance team.• Edited the Data Governance Council Charter for George Mason's Data Governance team.• Updated links and references to George Mason’s data governance policies.

• Created an API process document for the LivePerson At Scale Analytics Platform (ASAP). This document outlined the complete pipeline process, configuration, and parameters for the LivePerson ASAP.• Created a Conduent Automation Platform (CAP—an Azure cloud-based solution for handling client document transmissions) SOC 2 control specification document to link existing Conduent documentation to SOC 2 audit specifications.• Created a CAP Monitoring and System Activity Control document to outline the monitoring tools in place on Microsoft Azure to evaluate system performance issues, security threats, resource utilization, and unusual system activity.• Created ten new reference documents to show that the CAP follows HIPAA compliance standards.• Created six new reference documents to show that CAP follows SOC 2 compliance standards.• Created an SOP for granting associate access to CAP and CAP Azure portal via RBAC and Active Directory.• Collaborated with developers and our department’s Azure administrator to create a Disaster Recovery Plan for CAP.• Developed standard CAP audit and compliance documentation templates.• Lead multiple requirements gathering sessions to identify and address SOC 2 and HIPAA compliance requirements.• Tracked my audit documentation progress in Azure DevOps.

• Served as our EDW support team lead (with two direct reports) for approximately three years.• Trained our department personnel on the Thycotic/Delinea Privileged Access Management (PAM) solution and created accompanying documentation.• Served as our team’s subject matter expert on resolving access, configuration, and code issues for Bread Financials’ internal SAS and WinSQL users.• Addressed data and SQL query issues that our associates encountered on the IBM Netezza and Yellowbrick EDW platforms.• Fielded requests for where to find data elements in our IBM Netezza and Yellowbrick EDW platforms.• Oversaw quality assurance for all SharePoint sites and pages created by my group. This included activities up to and including recreating SharePoint pages in SharePoint Designer.• Resolved EST report delivery issues for our clients.• Collaborated with vendors to renew site licenses for the tools and applications that our department supported (SAS, Angoss, and WinSQL).

• Collaborated with various business leaders to develop requirements for Bread Financials’ governed Account Risk data mart.• Used the department’s revision request process to track and report on defects and changes to the Account Risk data mart fields and code.• Served as the liaison between Bread Financials’ Business Information Delivery group and internal auditors.• Maintained governance policies and advised management on conditions of non-compliance.• Built data governance artifacts for line of business reviews and approvals using the Collibra Data Governance tool.• Ran SQL queries to test data attributes and metrics prior to submission to the governed data marts.• Served as a SharePoint administrator and trainer for teams within the Business Solutions Delivery group.• Facilitated approximately sixteen individual SharePoint and Compuware ChangePoint training sessions for Bread Financial associates.

• Collaborated with Bread Financials’ risk compliance team to document my department's EDW disaster recovery plans.• Documented all facets of our active directory-based access provisioning process for the Bread Financial Enterprise Data Warehouse (EDW).• Created SOPs for configuring user EDW and SAS access.• Created a Tokenization Application Flow and Application Dataflow diagram to help maintain PCI Compliance.• Created process flow diagrams and SOPs to address our department's internal processes.• Created and maintained all our department’s SAS, IBM Netezza, and Yellowbrick instructional documents.• Collaborated with PCI, SOX, and FDIC auditors to provide compliance evidence documentation upon request.• Created approximately eleven training guides and twenty-five quick reference cards for Microsoft SharePoint and Compuware ChangePoint deployments.• Gathered and documented user management security requirements for Bread Financials’ Client Business Center Web Portal project.• Documented processes and procedures for the Collibra Data Governance Center, which is Bread Financials’ primary data governance tool.

Instructional Design• Developed and updated approximately seven user guides and ten quick reference cards for AEP’s Documentum deployment project using Adobe FrameMaker 7.2 (example here).• Developed e-learning course demonstrations and simulations using Adobe Captivate 3, Macromedia Dreamweaver 8, and Macromedia Fireworks 8.• Developed and edited storyboards for the Documentum training group’s e-learning courses.• Collaborated closely with the IT department’s business systems analysts and developers to gather training requirements.• Assisted in system testing sessions for new Documentum releases.• Attended requirements gathering meetings for Documentum updates and enhancements.IT Training• Delivered classroom training throughout AEP’s eleven state regions (over eighty individual classes) as part of the company’s Documentum deployment project.• Reported on any issues encountered in the company’s Documentum training environment.• Set up mobile classrooms at power plant sites.

Technical Writing• Served as our technical writing team lead (with two direct reports) for approximately two years.• Trained new technical writers to perform all technical writing team responsibilities.• Developed new and updated documentation using Adobe FrameMaker 7.0 and Adobe Acrobat 6.0.• Converted our department’s existing documentation to HTML format using Webworks Publisher 7.0.• Conducted interviews with subject matter experts and engineers to obtain technical information.• Maintained the department’s style guides, templates, and work instructions for conformance with TL 9000 standards.Technical Training• Developed one computer-based training course for one of Applied Innovation’s latest network management products using Microsoft PowerPoint 2002, Adobe Connect 6.0, and Adobe Captivate 2.• Conducted five week-long, instructor-led courses for Applied Innovation’s telecommunications customers both locally and at customer sites.• Coordinated shipping and classroom equipment setup at client sites. This included setting up all laptops, telecommunications monitoring devices, and classroom networks. • Updated user guides, including course exercises and demonstrations, for two of our courses.• Managed all administrative training tasks, such as shipping laptop classrooms to customer sites and submitting print requests.

• Developed objective-based course materials (ADDIE Model) for the company’s RSlogix 5000 programmable controller using InterLeaf 7.0.• Worked closely with departmental editors to maintain documentation quality standards.• Created course demonstrations using Flash.• Interviewed subject matter experts to develop course objectives.• Manually converted hundreds of course presentation deck slides to PowerPoint.