Cheryl Tomlinson Email & Phone Number

United States

Maintain the privacy compliance program under the Global Data Protection - Products Team and work with the products teams for the software solution, radio products and video solutions business units. Conduct privacy assessments, including documenting business process activities through data flow maps and privacy impact assessments. Manage the OneTrust privacy tool including the maintaining of the asset inventory. Consult with the privacy attorneys on the Global Data Protection - Products Team on a daily basis to track the assessments in progress, prioritizing new reviews and reassessments, review issues identified, provide and receive input on risks, assist with managing the risk register, provide training to the product teams and participate in presentations to cybersecurity, contracts, product teams, DPO's office and various other members of the company.

Reston, Va

• Managing the company-wide privacy program including providing guidance on privacy issues, and implementation of privacy plans for programs and projects containing privacy data.• Updating and implementing privacy policies, plans and audits. • Supporting corporate initiatives such as outsourcing of IT services, use of cloud storage, SaaS solutions and BYOD.• Providing guidance regarding HIPAA, HITECH, FCRA, PCI DSS, Privacy Act of 1974, Federal government agency regulations, state privacy and breach notification laws as well as EU Directive 95/46 and GDPR.• Supporting Corporate Treasury in managing the company-wide PCI DSS compliance program: o Implementing of any new PCI DSS requirements; o Creating and implementing a company standard documented plan; o Creating, implementing and providing PCI DSS training on compliance with Leidos’ program; o Filing annual compliance with Leidos’merchant bank • Member of the Information Protection Committee which consists of subject matter experts in various functions such as Cyber Security, Corporate Security, Corporate Legal, Export Control, Human Resources, Ethics and Compliance.• Member of the Institutional Review Board (IRB) as subject matter expert for privacy issues relating to any human subject research.• Manage HIPAA compliance for HR Benefits • SME for privacy issues pertaining to the merge transaction of Lockheed Martin’s IS&GS division with Leidos.• Providing privacy guidance on transition of data under the Transition Services Agreement pertaining to the merge of IS&GS to be completed in July 2017.

Saic

• Assisted Chief Privacy Officer in creating the privacy office for a Fortune 300 corporation ($11 billion revenue) that had national security, health and engineering business lines. • Provided support in the response to the largest reported U.S. health data breach affecting approximately 4.9 million individuals and another health data breach impacting approximately 880,000 individuals.• Provided input and support in the creation of SAIC’s PCI DSS Compliance program; managed PCI DSS compliance program, including updates to PCI DSS v2.0.• Provided support and guidance to business lines and corporate functions regarding HIPAA, HITECH, PCI DSS, Privacy Act of 1974, Federal government agency regulations, state privacy and breach notification laws.• Provided support for the split transaction of SAIC.

Washington D.C. Metro Area

Supported three attorneys in the legal department on various intellectual property and litigation matters. Supported SAIC’s Technology Commercialization Group (TCG) in commercializing intellectual property by assisting in the due diligence and managing SharePoint subsites for each program under review. Coordinated and managed meetings for any intellectual property contract reviews. Provided support to Trademark Attorney in filing of trademarks and managing trademark files.

Supported two attorneys and marketing department on various matters. Reviewed and edited documents, scheduled meetings and teleconferences, and maintained files for partner on various matters such as intellectual property, e-commerce, privacy, telecommunications, security, policy and export issues. Coordinated meetings and functions, assisted with mailings and material reviews for the marketing director.

Washington, Dc

Created an on-going training program for 125 users as well as a New User training curriculum. Implement training program, which consisted of training all users on applications most frequently used in the firm: Word 2000, Outlook 2000, Carpe Diem (3.0), PG customized programs CIS and PCIS, and Rolm Phones. Demonstration of intranet applications. Participate in pilot programs of various internal applications. Provide help on various projects utilizing programs such as Excel, PowerPoint and Access 2000.Developed monthly calendars of classes with updates provided each week. Produced and provided handouts for each class including the creation of a New User’s manual. Maintained database of student participation for each class. Researched for a skills assessment program to use for hiring and as an evaluation tool for staff. Coordinate off-site training for special needs such as Access 2000, Lexis-Nexis.

Washington, Dc

1996-1999 – Coordinated and prioritized daily activities of Managing Partner. Assisted in preparing for board of directors’ meetings and financials. Performed administrative functions in support of two partners. Assisted in client projects, which required proficiency in Word, PowerPoint and Excel. Participated in computer Hot Shots program as back up for Help Desk as well as provided training to New Users.1994-1996 – Assisted, as a legal secretary, in client projects, which required good knowledge of Word and PowerPoint. Created and maintained an Access database for an attorney’s use. Performed administrative functions in support of several attorneys.