While I am technically retired, I'm fortunate enough to have good friends in the industry and to enjoy periodic consulting engagements on a wide variety of technical projects. These have included, for example, teaching a week-long class on Vendor Risk Management, conducting VRA reviews, evaluating the accuracy and completeness of Configuration Management database CIs and related processes, conducting various threat-based risk assessments, for example, vendor exposure to a DYN-type DNS DDOS outage, and the identification and closing of potential gaps in existing SIEM processes / log monitoring capabilities such that illicit data exfiltration can be readily detected.

Responsibilities focused on IT Risk Management activities across multiple business sectors, including Wealth Management, HR, Real Estate, Legal, and other major business groups. Accomplishments were broad and diverse, for example:- Managed the division’s first PCI Compliance Review, with a follow up effort the following year. - Coordinated implementation of Transport Layer Security (TLS) across 160+ of the firm’s most important investment management partners. - Coordinated program to evaluate, select and implement the firm’s first end-point based data loss prevention (DLP) solution. Also coordinated review of network-based DLP solution- Led the firm’s efforts to establish a robust 3rd party vendor risk management program. During tenure with UBS, performed more that fifty vendor risk assessments, the majority of which were performed at the vendor site- As a senior staff member, mentored 15 junior IT Risk Management staff members, located at UBS facility in Krakow, Poland. This included process-related guidance and on-site training related to their vendor risk assessment duties, peer review of all vendor risk assessment reports, and review of proposed solutions.- Participated in review process that assessed business requests to outsource business and operational functions to offshore vendors and to UBS-owned offshore facilities- Managed the divisions web-based content filter program, which enforced the policy-based web site filtering, and evaluated end user requests to unblock previously, prohibited web sites- Participated in review board process that assessed application architecture & IT controls

Served as IT Risk Manager for multiple lines of business including Global Bank, Corporate and Infrastructure Divisions.