Erika Garcia Tuazon, Cipm, Cipt Email & Phone Number

Who I am:Results-oriented privacy and security risk management professional with a proven track record in building and streamlining program operations to boost compliance with regulatory requirements and corporate strategy. I am a passionate problem solver with outstanding organizational skills and the ability to drive program vision in alignment with enterprise objectives and culture. Fundamental Strengths and Experience: - data privacy and security risk management- Policy development in alignment with various frameworks and regulatory requirements including HIPAA, HITRUST, ISO, SOC2, NIST, PCI DSS, GDPR, CCPA, CPRA- Personalized, unique approach to training and awareness to drive a privacy and security centric enterprise culture- Incident management and breach notification - Successful privacy and security operational programs development and scalingCareer:- Led efforts to establish a robust and impactful security training and awareness program company wide at a large health care organization, including the launch of a phishing awareness program, roadshow across all office locations, industry benchmarking, and security ambassador program.- Established and operationalized a scalable third party risk management program across privacy and security and incorporated automation, while leveraging existing toolsets and coming in under budget and ahead of schedule for program launch. - Headed the stand up of cookie management across all company-owned websites and implemented a regular review cycle to build in tracker analysis efficiencies.- Stood up an effective privacy awareness programs enterprise wide across tech startups, with proven employee adoption and understanding through a significant reduction in privacy-related incidents caused by employees, reducing overall risk.- Developed and socialized company policies in compliance with applicable and stringent regulatory requirements and established a policy review program, gaining leadership support & workforce adoption to enhance company’s compliance posture. - Facilitated the ground-up development of a holistic privacy program across a global SaaS organization including establishment of a data inventory, records of processing activities, data privacy impact assessments process, third-party privacy risk management processes, individual rights management, website trackers and consent management, privacy policies, and customer assurance.

• 

  Manager, Information Security Risk

  Onetrust

  Elk Grove, Ca, Us