Denice Murphy (She/Her/Hers) Email & Phone Number

Phoenix, Arizona, Us

San Antonio, Texas, Us

San Francisco, California, Us

Responsible for providing enterprise-wide risk management oversight for Information Technology (IT) capabilities spanning the financial services organization.- Independent oversight of Information Technology strategy, risk, policies and standards for front-line. Responsible for monitoring and measuring risk for front-line to ensure it remains within risk appetite of the organization. Leveraged internal and external benchmarking of industry models frameworks, coupled with regulatory guidance (FFIC, FRB, OCC, FDIC, etc.) to create a multi-tiered approach to monitoring and measuring front-line line risk.- Assessing control environment to assure risk is mitigated appropriately, determine if there are control gaps and challenge front-line as appropriate.  - Ensure Regulatory and Internal Audit Requests are appropriately managed and responded to regarding Information Technology Oversight activities.- Present Information Technology Risk Oversight strategy and approach to all levels of leadership to ensure understanding of key risks and second-line perspective of front-line line. Able to translate nuanced technical risks to business-centric concepts to focus discussion around risk.

New York, Ny, Us

Responsible for providing enterprise-wide risk management for Information Security (IS) and Information Technology (IT) capabilities spanning global financial services organization. - Independent oversight of Information Security and Information Technology strategy, risk, policies and standards for first-line. Responsible for implementing a methodology and aligned approach for assessing information security and technology risks. Leveraged internal and external bench-marking of industry models frameworks, coupled with regulatory guidance (FFIC, FRB, OCC, FDIC, etc.) to create a multi-tiered approach to monitoring and measuring first-line risk.- Developing control and threat library utilizing attack trees and cyber kill chain approaches to mapping risks, measuring control efficacy and determining key controls. - Ensure Regulatory and Internal Audit Requests are appropriately managed and responded to regarding Information Security & Information Technology Oversight activities.- Present Information Security and Information Technology Risk Oversight strategy and approach to all levels of leadership to ensure understanding of key risks and second-line perspective of first-line. Able to translate nuanced technical risks to business-centric concepts to focus discussion around risk.- Third Party Management second line Oversight IS & IT pillar owner for the One Voice team. Collaborate across 2nd line pillars (Privacy, Compliance, etc.) to holistically understand and monitor Third Party Management risk at American Express.

New York, Ny, Us

- Program Manager for Network Access Control (NAC) 802.1x deployment across Campus LAN environment using Cisco Identity Services Engine (ISE). Managed budget, hardware requirements, code requirements for deployment. Collaborated with endpoint teams to identify 802.1x strategies for each device type. Created the financial and staffing plan for Information Security and Network team resourcing. Provided direction to a team of consultants, contractors, Engineers and Project Managers. Successfully deployed 802.1x to targeted sites. Created deployment framework, planning roadmap and foundational infrastructure for future enhancements to ISE capabilities. Managed project plans, critical path, risks and issues for the deployment.- Managed the Wireless Network team of four technical resources. Provided strategic goals, mentoring and development for the team. Worked to uplift existing Corporate Wireless sites and bring new Remote Access Point (RAP) technology into the American Express environment. Supported the Business Travel AXCESS@Home initiative with RAP devices, a top initiative which drove down costs and increased employee engagement.- Data Center 2015 single point of contact for Information Security IPC-1 Retro-fit and IPC-2 migrations. Worked across Information Security to gather requirements, business justifications and system requirements for over 40 different applications to provide seamless migrations and minimize business interruptions. - Collaborated with the Firewall and Wireless Network teams to complete a global refresh of hardware, including budgeting, creating timelines, working with domestic and international resources to complete the installation of the hardware.Managed $2MM budget to within 1% of forecast for our Information Security Program.

New York, Ny, Us

- Set global policies for internet access for all users company-wide, utilizing PMO Governance for development and approval of web policies. Hosted monthly Governance reviews with representatives from Legal, Human Resources, Information Security and Technology Communications.- Developed system requirements, process flows and documentation for user proxy exception requests for internet access resulting in a cycle-time reduction. - Oversaw the blocking of webmail access on the Corporate Network, ensured all resources who required access to webmail were provided access prior to the block. Managed a 500% increase in Internet access requests due to blocking webmail without an increase in staff.Troubleshooting of technical system issues on the Internet proxy servers. - Developed Key Risk Indicators (KRI) and KPI for the program to help mitigate risk associated with Internet activities.- Created RFI and RFP for our External Incident Response Team. Developed scoring for each RFI and RFP responses to drive consensus on system selection. Managed $3MM budget to within 1% of forecast. Used Clarity to track variable billing resources.

Master Of Science In Risk Management, Risk Management

Bachelor Of Science (B.S.), Anthropology

Anthropology