Manages the Data Risk Intelligence team. Applies privacy and regulatory requirements on a process and system level. This includes the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Lei Geral de Proteção de Dados (LGPD), Personal Data Protection Act (PDPA) and others. Oversees and develops Privacy Impact Assessments, Data Protection Impact Assessments, Risk Assessments, Vendor Impact Assessments as well as the management of Records of Processing documentation for both GDPR & LGPD. Serve as primary privacy liaison between the Legal, IT, and business end-users. Investigates and responds to data privacy inquiries and incidents. Directs and creates privacy training and awareness. Assist in drafting, reviewing and execution of Data Processing Agreements (DPA) and Standard Contractual Clauses (SCC). Lead a team responsible for implementation of the CHS Global Privacy Notice, Cookie Notice, and Privacy Policy.

Corporate expert on regional Information Security and Privacy (ISP) regulations.Worked with management and associates to implement regulations and monitor compliance level.Completed risk assessments to apply an appropriate approach to regulations to mitigate risk.Developed and coordinated awareness building activities for associates & leadership.Collected, organized and maintained documentation as required by ISP regulations.Performed audits to ensure compliance standards.Built awareness on regulations as a part of the RBNA team.

Managed Privileged Account Management and screened security controls including database activity monitoring and blocking, privileged user and multi-factor access controls.Used Lieberman's ERPM system to create password management sets for users.Processed escalated requests from Service Desk Specialists, primarily through the Problem Management System; but also included request via telephone and email.Performed security account audits and validation while monitoring safety issues, risks, and project change requests for the Identity and Access Management Group to ensure compliance to standards and Service Level Agreements.Contributed in establishing policies and procedures necessary to ensure the security of information system assets, and to protect them from intentional or inadvertent access, disclosure, or destruction.Ensured that user community understands and adheres to necessary procedures to maintain security.