Carmel Mcmahon Email & Phone Number

New York, Ny, Us

New York, United States

Greater New York City Area

Outlined roadmap and implemented Third Party Risk Management (TPRM) program, addressing significant regulatory (MRA) and audit findings.• Implemented new TPRM framework, policy, procedures, and enhanced due diligence.• Established and chair TPRM governance committee, with representation from all business lines and control functions, in order to address use of critical and high-risk third parties. Responsible for approving TPRM Policy, evaluating policy exceptions and risk acceptance… Show more Outlined roadmap and implemented Third Party Risk Management (TPRM) program, addressing significant regulatory (MRA) and audit findings.• Implemented new TPRM framework, policy, procedures, and enhanced due diligence.• Established and chair TPRM governance committee, with representation from all business lines and control functions, in order to address use of critical and high-risk third parties. Responsible for approving TPRM Policy, evaluating policy exceptions and risk acceptance requests, and driving critical implementations and strategy.• Led team responsible for conducting remote and onsite information security assessments of third party suppliers. • Drove efforts to ensure comprehensive inventory of third party suppliers. • Developed and rolled out training to raise awareness of third party risk and familiarize staff with TPRM program. Show less

Greater New York City Area

Led global team of 10 Information Security Coverage Officers who provide advisory services and partner with Business Unit Information Security Officers (BUISOs) to identify, evaluate and manage IS risk. Key areas of focus included:• Driving consistent execution in order to facilitate risk evaluation, control adoption and risk awareness across all business units firm-wide.• Partnering with IS program owners to enable delivery of solutions that meet the needs of the business and reduce IS… Show more Led global team of 10 Information Security Coverage Officers who provide advisory services and partner with Business Unit Information Security Officers (BUISOs) to identify, evaluate and manage IS risk. Key areas of focus included:• Driving consistent execution in order to facilitate risk evaluation, control adoption and risk awareness across all business units firm-wide.• Partnering with IS program owners to enable delivery of solutions that meet the needs of the business and reduce IS risk across the firm.• Representing Coverage within the IS Governance Committee (ISGC) and various working groups spanning programs such as Access Management, Data Leakage Prevention and Global IS Program Policy. Show less

Greater New York City Area

Drove implementation and effectiveness of the Information Security (IS) program within the Technology and Information Risk (TIR) division. • Led global BUISO team in efforts to: raise awareness of IS risk; assess compliance with the Global IS Program Policy; execute annual IS Risk Assessment (ISRA); prioritize assets for on-boarding onto entitlements platform; provide periodic reporting outlining the state of IS risk within the division.• Evaluated policy exception / risk acceptance… Show more Drove implementation and effectiveness of the Information Security (IS) program within the Technology and Information Risk (TIR) division. • Led global BUISO team in efforts to: raise awareness of IS risk; assess compliance with the Global IS Program Policy; execute annual IS Risk Assessment (ISRA); prioritize assets for on-boarding onto entitlements platform; provide periodic reporting outlining the state of IS risk within the division.• Evaluated policy exception / risk acceptance requests; determined appropriate course of action following data leakage incidents.• Participated in IS governance to drive program change to address high priority residual risks. Show less

Greater New York City Area

Responsible for identification, assessment, management and mitigation of operational risk within the Technology & Information Risk (TIR) division. • Led the global Risk Officer team in efforts to: promote a culture of risk awareness; assess compliance with Tech & Data Policy; manage execution of regulatory / audit examinations; execute key risk remediation adoption efforts; maintain business continuity plans; execute the annual Risk Control Self-Assessment (RCSA).• Chaired the TIR… Show more Responsible for identification, assessment, management and mitigation of operational risk within the Technology & Information Risk (TIR) division. • Led the global Risk Officer team in efforts to: promote a culture of risk awareness; assess compliance with Tech & Data Policy; manage execution of regulatory / audit examinations; execute key risk remediation adoption efforts; maintain business continuity plans; execute the annual Risk Control Self-Assessment (RCSA).• Chaired the TIR divisional Risk Committee, comprised of the TIR CIO and management team, in order to examine the state of operational risk within the division. Show less

Greater New York City Area

Led efforts to implement changes to the Information Security (IS) program operating model in order to achieve improvements in the protection of Firm, client and employee information. Key contributions:• Implemented IS Risk and Control Framework which serves as the cornerstone for all aspects of the IS program; all metrics, projects, and risk assessment / acceptance activities link to the framework.• Designed and implemented IS Risk Assessment (ISRA) program to assess IS risk across the… Show more Led efforts to implement changes to the Information Security (IS) program operating model in order to achieve improvements in the protection of Firm, client and employee information. Key contributions:• Implemented IS Risk and Control Framework which serves as the cornerstone for all aspects of the IS program; all metrics, projects, and risk assessment / acceptance activities link to the framework.• Designed and implemented IS Risk Assessment (ISRA) program to assess IS risk across the Firm and drive 3-year IS Strategy. • Defined role and engagement model for client Coverage organization aimed at enabling BUISOs to develop BU-level IS strategies and execute their BUISO responsibilities. • Developed Entitlements Strategy, outlining future state vision and identifying gaps within current state. • Moderated the Firm’s ISGC comprised of senior risk managers across the Firm, responsible for approving Global IS Program Policy, risk acceptances, critical implementations, and strategy. • Led Supplier Security Assessment function to assess suppliers who host, store or process sensitive Firm information; drove improvements including revised risk calculation and assessment of subcontractors Show less

Greater New York City Area

Developed operational risk technology strategy supporting all divisions firm-wide. Chaired Operational Risk Technology Steering Committee (ORTSC) comprised of senior risk managers and technologists across the Firm in order to drive technology strategy supporting the operational risk agenda.

Greater New York City Area

Led team to implement business intelligence-based reporting in support of marketing function within major retail bank.

Greater New York City Area

Relationship Manager at major retail bank responsible for guiding branch banking channel through a program of technology initiatives designed to improve operating performance and customer service. Provided oversight necessary to address operational issues while mitigating project risk to the business.

Greater New York City Area

Formed and led Data Management Group responsible for logical modeling and physical design of Sybase and DB2 repositories supporting numerous applications. • Chaired DB2 Data Access forum in order to develop and implement best practices related to sharing and insulation of physical data structures; forum participants developed standards relating to the use of tables, views, stored procedures and pub/sub mechanisms for transaction and query repositories. • Established Data Modeling… Show more Formed and led Data Management Group responsible for logical modeling and physical design of Sybase and DB2 repositories supporting numerous applications. • Chaired DB2 Data Access forum in order to develop and implement best practices related to sharing and insulation of physical data structures; forum participants developed standards relating to the use of tables, views, stored procedures and pub/sub mechanisms for transaction and query repositories. • Established Data Modeling Forum in order to develop and share data modeling standards across the Firm. Show less

Greater New York City Area

Managed global application development organization supporting institutional Controllers providing application functionality to streamline P&L production, regulatory reporting, books-to-reported reconciliation, and mark-to-market activities.

Greater New York City Area

Relationship Manager supporting 1200-person Controller Business Unit. • Provided financial planning and control of $105MM technology budget. • Co-chaired Controller IT Steering Committee; worked with senior Controllers to define technology objectives. PRIOR RELEVANT EXPERIENCEPEPSI-COLA COMPANY – Somers, NY Manager, Database Design Team: Developed enterprise-wide relational data models supporting… Show more Relationship Manager supporting 1200-person Controller Business Unit. • Provided financial planning and control of $105MM technology budget. • Co-chaired Controller IT Steering Committee; worked with senior Controllers to define technology objectives. PRIOR RELEVANT EXPERIENCEPEPSI-COLA COMPANY – Somers, NY Manager, Database Design Team: Developed enterprise-wide relational data models supporting business processes and information requirements. Managed work plan and staff resource allocation supporting 45 applications accessing over 800 tables, across 25 servers, with bi-directional data replication. INTERNATIONAL BUSINESS MACHINES CORPORATION - Harrison NY Advisory Systems Engineer: Performed corporate account marketing and support of hardware, software and services. Led efforts to cost-justify, plan, and implement IBM solutions. Focus areas included disaster recovery, outsourcing, relocation, maintenance and system managed storage.MVS Systems Programmer: Led eight-member team in planning, installation, customization and maintenance of MVS operating systems, associated program products and hardware devices across six mainframe processors, supporting key IBM business system production and development environments. Show less

Mba, Finance

Bs, Computer Information Systems