As an integral member of the executive leadership team, I serve as an expert in all matters related to privacy, risk, technology and data governance, compliance, and corporate strategy. In this role, I lead regulatory relationships and provide continued oversight of the company's compliance programs, leveraging comprehensive knowledge of legal, information security, and regulatory requirements applicable to industry best practices. Highlights of my experience in this role include:• Interfaced with legal, technology, and senior leadership teams to design / deploy privacy and risk assurance framework to comply with applicable regulations; (General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Children’s Online Privacy Protection Act (COPPA), Know Your Customer (KYC) regulations, and Anti-Money Laundering (AML) regulations etc.).• Revitalized corporate information security practices and policies including implementation of employee usage policies, encryption, segregation of duties, and data deletion practices. • Engaged with law enforcement to formulate policies, handling procedures and monitoring processes for nefarious content; included proper handling of content and reporting requirements to law enforcement. • Created disaster recovery and business continuity plans to support operations in the event of disaster or business disruption; additionally, developed Incident Response Plan and Breach Notification policies. • Established testing of automated Data Subject Access Request tool to enable users to control their data in alignment with corporate strategy, polices, and regulations; analyze and test new products and features. • Performed assessments on supporting processes and technology for U42 cryptocurrency.

Moved through progressive roles within this organization, identifying pain points to gain an in-depth understanding of internal strategy to create streamlined system solutions that align technical needs with compliance objectives. Investigate information systems and lead the design, specification, and selection of information system solutions, considering functionality, data, security, integration, infrastructure and performance. • Designed US/EU Model Clause Data protection and compliance program for EU residents (employees and consumers).• Launched new Data Governance and Assurance Controls framework to protect Turner’s Data and Systems and performed risk-based audits; implemented remediation to ensure all risk issues have been addressed (PCI, Safe Harbor/Model Clause, SOX, GDPR, CCPA, COPPA).• Designed US/EU Model Clause Data protection and compliance program for EU residents (employees and consumers).• Developed and implemented GDPR framework across Turner’s Brands including CNN, TBS, TNT, Cartoon Network and Bleacher Report; additionally, designed Privacy Impact Assessment (PIA) for GDPR.• Reconciled existing control frameworks such as SOX, IT General Controls (ITCGs), Model Clause, Safe Harbor, COPPA and newly created GDPR controls into a Unified Control Framework. • Spearheaded processes to remediate all privacy / risk issues across all Turner properties (mobile application, consumer websites, internal and cloud hosting, internal applications and their supporting databases and operations) and vendors.

Served as a strategic partner regarding organizational design and change management initiatives, utilizing risk expertise to improve process and implement best practices. Established and aligned structure, implementing systems and processes to drive growth, innovation, and continuous improvements.• Facilitated detailed risk assessments for all of the human resources business processes including payroll, collections, and benefits resulting in action plans and remediation efforts.• Served as Human Resources Business Continuity and Planning Coordinator- developed, revised, and implemented testing plans to ensure continuous operations during a catastrophic event. • Collected and reviewed SOC 1 reporting for third party HR service vendors with controls, processes, and data relevant to SunTrust’s financial reporting.

Online Fraud Detection & VIP / Commercial Bank Card Fraud Manager (2012 to 2013)Coordinated and reviewed business operations to ensure compliance with government regulations and ordinances. Analyzed AML policies against BSA / FinCEN guidelines related regulatory information. Reviewed audit findings and identified compliance issues, developing risk management strategies to ensure firm compliance. • Led on-shore / off-shore teams (over 22 employees and 20 offshore contractors) to manage all aspects of the Online Fraud Detection and VIP/Commercial Bank Card Fraud Investigation teams which includes over one billion dollars in movement of funds daily• Championed the development of new VIP/Commercial Bank Card Fraud Detection program for SunTrust for VIP and Commercial Card Portfolios in addition to overhauling existing Online Fraud Detection Program.• Defined and implemented new performance metrics for fraud investigators resulting in over 50% increase in productivity.

Administered all aspects of Enterprise/ Operational Risk Management for assigned businesses and process including self-certification, issue tracking, risk acceptance governance, loss data collection, incident management, scenario analysis, ad-hoc risk assessments, and process reviews.• Coordinated complex risk assessments for key business processes, products and systems ultimately identifying risks that required immediate attention. Areas included: ACH payments & Underwriting • Provided expert risk advice to new and ongoing business initiatives to the business units including: Merchant Boarding, Customer Care, Credit Risk, Product Development, Fraud Group, and Sales