Established a team that to troubleshoot issues in system access, Third Party Risk Management, information protection, and risk mitigation for an organization of 8,000 users. Represented Wealth Management in the Technology Risk Working Group.• Closed outstanding audit findings by creating and implementing new processes.• Monitored changes in the organization by automating a weekly scan. Used results to adjust permissions and roles in a timely manner.• Resolved ownership issues by automating scans of shared folders and drive mappings.• Took over reporting responsibilities for subject matter experts who left the organization and were not replaced. Improved reporting flexibility by introducing parameters and making these reports self-service. Streamlined extraction process, reducing it to less than 10% of its previous duration.• Stepped in after the departure of SharePoint SMEs to monitor permissions, content, stability, and capacity of 8 SharePoint sites that included application created with Nintex Workflow and Nintex Forms and provided documentation. Oversaw the conversion of SharePoint On-Prem tools to SharePoint Online cloud-based tools, converting Nintex Workflows and forms to Power Apps and Power Automate.

Coordinated with the Office of the Comptroller of the Currency (OCC) to implement processes for encryption of data at rest, compliance monitoring, and regular review and certifications of banking systems across several platforms. Led team managing information security policy exceptions. Chaired enterprise Policy Working Group meetings and represented the Information Security Policy team on the Information Security Steering Committee.• Authored and maintained library of policies, standards, guidelines and system hardening baselines. Collaborated with asset owners at all levels to ensure that policies were practical, beneficial, consistent, and comprehensive. Created and oversaw a new policy exception request process.• Established a common control framework (CCF) to link policies to requirements from the FFIEC, PCI, and other legal and regulatory sources. Created a data model to integrate all elements into a unified whole. Defined a hierarchy of documentation to ensure traceability consistent derivation of security rules. Created, maintained, and used solutions in Archer eGRC to assess and monitor compliance. Used CCF data model to build policy/control solution.• Created automation tools to assist technical SMEs. Provided the network security group log-parsing Perl scripts for Sidewinder firewalls and enVision appliances to extract statistical information about outbound and inbound traffic. Enabled the group to flag traffic patterns and tune rules on proxies and firewalls.

Contracted to US Postal Service in the Information Security Office and Host Computing Services. Administered Certification and Accreditation process as ISSO, Performed audits and penetration testing.