Evan Childs Cism, Crisc, Ctpra Email & Phone Number

Executed strategic improvement and operational management of ABK’s global security governance, third party risk, and compliance functions, increasing efficiency and intelligence of risk management integrations and threat posture. Streamlined security control processes, and mentored three specialized teams, boosting data quality and customer satisfaction.

• Managed and oversaw GRC consulting strategies for strategic clients and delivery teams, offering top-tier Information Security advisory support with organizations to assess, recommend, and implement sustainable.
• Oversaw GRC consulting strategies for multiple Fortune 500 companies, implementing process improvement solutions in policy framework, risk… Show more Managed and oversaw GRC consulting strategies for strategic clients.
• Oversaw GRC consulting strategies for multiple Fortune 500 companies, implementing process improvement solutions in policy framework, risk assessments, and organizational transformation.
• Leveraged industry-standard cybersecurity controls and risk frameworks, including FAIR,NIST, CIS, and ISO27001, ISO27017,27018.
• Secured engagement sales opportunities and managed PNL by comprehensively understanding client business challenges, crafting industry-leading solutions, and effectively converting them into revenue-generating ventures.
• Facilitated mentorship and development opportunities for teams of 5+ staff and managers, across numerous engagements, nurturing their career advancement, cultivating Information Security skills, and technical.

• Oversaw and led the Global Information Security team supporting functions for GRC, Security Assurance, Third Party Risk Management, Vulnerability Management, and Security Engineering/Operations, resulting in.
• Established executive and board level reporting, leading to a increase in informed decision-making and improved alignment of security initiatives with organizational goals.
• … Show more Oversaw and led the Global Information Security team supporting functions for GRC, Security Assurance, Third Party Risk Management, Vulnerability Management, and Security Engineering/Operations, resulting.
• Enabled sales growth through the creation and oversight of a dynamic security governance and compliance program, aligned with ISO27001 and SSAE18 SOC1/2 accreditations, enhancing the value proposition for.
• Revamped risk management methodologies with an ISO and NIST-based assessment and scoring framework, improving processes for reviewing, evaluating, and monitoring risk treatment for vendors, threats, and control.
• Championed alignment of security, privacy, and data protection requirements across jurisdictions to foster privacy alignment. Resulting in streamlined business operations for internal, customer, and supplier.

Greater Atlanta Area

• Lead Global Information Security's Governance program by overseeing the adoption, implementation, and management of established standards, processes, and policies, in accordance with 8+ ISO27001 accreditation.
• Enforced Global Information Security's strategic objectives by overseeing the adoption and implementation of established standards, processes, and policies.
• Led security risk assessment projects.
• Managed the enterprise Information Security… Show more Lead Global Information Security's Governance program by overseeing the adoption, implementation, and management of established standards, processes, and policies.
• Managed the enterprise Information Security Management System (ISMS) program across multiple locations to maintain ISO 27001 accreditations and oversaw the enterprise security awareness and training program. Show less

• Provided pivotal support for security program development and operations across five functions, managing budget, resources, communications, and escalations to ensure alignment with executive leadership and business.
• Played a key role in the successful implementation of a major product launch by collaborating with cross-functional stakeholders to remediate audit findings, resulting in overall risk reduction.
• Centralized and matured security governance and compliance… Show more
• Centralized and matured security governance and compliance programs, facilitating PCI-DSS, ISO, and SSAE18 SOC I & II compliance through a unified control framework and automated reporting.
• Led a cross-functional security committee, to analyze and monitor risks associated with third-party suppliers, promoting secure design practices and product data protection.
• Created strategic partnerships and formalized process workflows between legal and security programs to review and approve security contractual agreements, disputes, and mediations. Show less