Principal Areas of PracticeTechnology risk management, audit readiness, technology operations, risk/mitigation strategy and governance, ICT procedures and operations, alignment with businss, data analytics, communication, internal/external client service, information security and privacy, third-party risk assessment. Highly skilled in documentation, process development, controls design, implementation, regulatory compliance, and analytics/reporting. Capabilities in industry regulations and standards, controls, planning, testing and remediation: Sox, SOC, ISO, PCI-DSS, ISO27001, NIST 800-53, CIS-20, CSA, CPRA, GDPR, NYDFS