VP Cybersecurity- Global Regulator Audit, 7/2015 - PresentResponsible for coordination of responses for regulatory and audit engagements globally including exam management, regulator/audit engagement and responses.• Regulatory Assessments. Successfully coordinated global regulatory reviews and responses including: the FFIEC Cybersecurity Assessment Tool (CAT), Hong Kong Monetary Authority, Saudi Arabia Monetary Authority, Office of the Comptroller of the Currency. Activities involved collection of initial responses, review and development of formal regulatory response and coordination of reporting prepared for the Regulators.• Information Security. Effectively managed all audits globally for Cybersecurity including audit management, audit engagement, audit response and follow up to non-compliance issues.• Process Improvement. Developed audit engagement framework aligned with technology regulatory management framework including toolsets and repositories.

VP Cybersecurity – Technology Control Office, 8/2014 - 6/2015 Established, developed and built a risk identification function including program design, tracking and management.Coordinated all audit and regulatory activities impacting Cybersecurity.• Risk Assessment. Performed Risk Assessments (Application Control Assessment/Application Risk Assessment,etc.) for Cybersecurity tools. Effectively managed exceptions identified for non-compliance with standards.• Metrics. Designed and managed metrics for Business Control Committee reporting.• Process Improvement. Developed risk and control process documentation including the development of a risk and control matrix; along with the performance and coordination of testing.

Managed the overall reviews of firewall access requests to ensure compliance with standards, engineering guidelines and best practices.• Staff Management. Managed 5 individuals to ensure processes and standards were consistently used and applied.• Governance. Led escalations of LOB issues with the review process and where necessary, denied the change.• Standards. Ensured consistent approach and methodology by developing standards reflecting what internal and external network access should be permitted.• Process Improvement. Developed and implemented initial recertification process for the firewall environment.

Led Risk Management Technology Control Office. Established, developed and built a risk identification function including: program design, tracking and management.• Risk Assessment. Ensured gaps were properly identified and tracked; conducted and reviewed Control Self Assessments. • Governance. Developed risk reporting for executive and line management.

Led Data Center Technologies (mainframe/large mid-range organization) Established, developed and built a risk identification function including: program design, tracking and management.• Risk Assessment. Ensured gaps were properly identified and tracked; conducted and reviewed Control Self Assessments .Coordinated audit activities and managed exceptions identified for non-compliance with standards.• Governance. Developed risk reporting for executive and line management.

Performed “Air Traffic Control” to improve coordination for cross-impacting changes in the infrastructure environment. • Governance. Developed/conducted LOB coordination review of IT changes to reduce potential production impacts.• Quality Control. Led performance of “readiness reviews” for complex and cross-impacting changes.

• Auditor. Participated on Infrastructure Audits including: MVS, RACF, various data centers, change control tools, system utilities (scheduling, backup/recovery, network), Tandem, Safeguard, iSeries, DecVax.• Strategic Planning. Participated and developed strategic platforms for change/problem/incident tools and processes.• Tools. Conducted/developed programming for Computer Assisted Audit Techniques (CAAT) in support of LOB Audit.