Casey Petry, Cisa, Pci-Isa Email & Phone Number

San Francisco, Ca, Us

San Francisco, Ca, Us

Mountain View, Ca, Us

Design, build and implement compliance at scale. I partner with legal, product, security, and engineering teams to build compliance programs, define compliance requirements, and build infrastructure to reduce manual processes in the quickly growing regulatory landscape. I manage highly complex programs at scale and ensure alignment across other vertical teams to reduce duplication of efforts and streamline processes. - Designed and developed a compliance program for legal driven requirements across multiple product engineering teams for tagging data and applying requirements based on tags.- Developed scripts to enable real-time monitoring of compliance metrics and automation of operational controls. - Designed control standardization and automation processes to better align compliance testing requirements across multiple compliance certifications.

Beaverton, Or, Us

Provide Nike, Inc. leadership and the Audit & Finance Committee with risk insights that may impede ability to execute against strategy objectives. Influenced leadership and management to implement long-term solutions aligned with strategy to ensure risk mitigation and remediation across complex end-to-end processes. Recognized as a strong influencer and ability to translate between technology and business risks.- Assessed emerging technology innovation areas to identify technology risks across the Engineering landscape, including cloud, launch, third-party partnerships, social media, digital marketplace, and geographies.- Connected technology risk to business impact through leadership within cross- functional audits, resulting in senior leadership influence to solve end-to-end gaps.- Business process driven analysis approach to highlight largest risk drivers across the underlying technology landscape.- Designed and implemented security and privacy controls across both engineering and business functions, including marketing and innovation.- Cross-functional influencer from executive leadership to engineering experts to communicate risks, develop action plans and manage remediation implementations.- Created cybersecurity governance program based on NIST CSF 1.1 to provide assurance over organizational posture mapped to business capabilities.-Partnered with Privacy organization to ensure adherence to geography specific privacy laws and align on holistic control recommendations during technology development implementations.- Consulted with engineering and architecture for identity management design across a multitude system landscape to align and standardize authorization, authentication, accountability, and identification.- Established cloud assurance testing framework and testing steps to measure cloud security posture and KPI metrics to leadership.

Beaverton, Or, Us

Responsible for leading design and implementation of new business processes and controls across multiple teams and understanding complex integrated systems. Drove SOX compliance automation and end-to-end controls. Recognized as an outstanding problem solver and ability to navigate relationships across business and technology functions.- Functioned as product owner for compliance automation tool for ITGC driven metrics and workflow automation.- Managed global PCI DSS program and self attested as a PCI DSS Internal Security Assessor (ISA).- Created executive dashboards which analyzed stakeholder metrics such as control operating effectiveness, deficiency tracking, and top performers.- Consulted with internal and external teams for compliance, risk, and governance initiatives.

Greenwood Village, Co, Us

Performed security audits and provided clients with technical expertise in the realm of compliance and risk profiles. Recognized as an excellent relationship manager which led to future work and on-time and on-budget projects.- Managed PCI DSS assessment and remediation projects for Fortune 500 companies across retail, healthcare, service providers, and governmental agencies.- Performed risk assessments and analysis for clients to meet compliance requirements and aide in risk management for the organization.- Developed security architecture strategies and performed design consultations to align with corporate strategies.

Originally hired as a business systems analyst for a new ERP upgrade, focused on delivering financial requirements into the new technology platform. As a merger & acquisition company, my responsibilities shifted towards a program management role developing SOX and PCI DSS compliance controls across the newly acquire e-commerce company. Recognized by leadership for compliance program management and influencing across finance and engineering stakeholders.- Established PCI DSS program for newly acquired e-commerce business that was previously a privately held company.- Managed audit projects from risk assessment and scoping, through remediation of results.- Managed internal information security program; Acted as a liaison between QSA, ASV and corporation; Developed cybersecurity awareness program to align with corporate and technology strategies including cloud and mobile technologies.- Worked with legal to ensure legal requirements for consumer PII were incorporated in geographic policies and to understand the privacy & security risks associated.- Developed a corporate cloud security architecture and cloud security monitoring strategy.

Seattle, Washington, Us

As an analyst at Nordstrom I partnered in building a new, high material, merchandising system which promotes the company's future international endeavors. I have fostered numerous relationships with key business stakeholders by showcasing my accountability and reliability. Implementing a new system has forced teams to analyze current and future needs while reevaluating business processes. Part of my implementation efforts were focused on international standards and compliance with suppliers.In my time at Nordstrom I led SOX compliance efforts for one of the major in scope applications. The audit process was heavily improved and had one of its greatest compliance scores. Below are additional responsibilities and achievements during my time at Nordstrom:- Partnered with IT and Business during new ERP implementation to assure compliance with SOX and corporate policies.- Created and designed security roles for the ERP system to ensure proper SOD’s.- Validated and maintained compliance, and generated business requirements for the automation and enforcement of compliance through technical controls.- Worked with external auditors during SOX engagements for walkthroughs and Operational Effectiveness testing.- Coordinated quarterly user access reviews for 8,000 employees in different geographical regions.- Led process improvement efforts for SOX impacting processes through meetings with IT and business users and documenting as-is and to-be processes.- Redefined policies and procedures for IT related risk controls.- Supported retail stores incident management program for detection and response of incidents.- Created timelines and processes for application authentication through Identity Access Management (IAM).