Gregory M. Gist, Cbcp Email & Phone Number

New York

I support the core delivery of resilience and assessment programs to evolve DTCC'sfoundational resilience disciplines (Business Continuity, Crisis Management, Scenario Testing, etc.)

New York City Metropolitan Area

I served as the Director of Technology and Information Risk Management at Promontory Financial Group, an IBM Company. With a focus on driving diversity, equity, and inclusion, I spearheaded Promontory's Black Affinity Group, fostering awareness and addressing issues affecting Black employees through various engaging activities.Throughout my tenure, I have been entrusted with overseeing client engagements for both financial and non-financial companies, optimizing their experience by delivering third-party risk management and ensuring regulatory compliance. I have successfully participated in developing cloud risk and control framework aligned with NIST 800-53 standards, effectively mitigating potential risks for organizations undergoing cloud migration. Additionally, I provided valuable advisory services to clients, aligning their security policies with institutional resilience frameworks to ensure seamless migration planning.Key Achievements● Optimized client experience by overseeing client engagements for financial and non-financial companies, delivering third-party risk management, and ensuring regulatory compliance.● Mitigated potential risk by devising a cloud risk and control framework, aligning it with NIST standards.● Ensured seamless cloud migration planning by delivering valuable advisory services to clients and aligning security policies with institutional resilience frameworks.● Improved staff performance by leading a team of four experts in evaluating fintech risk management practices.● Confirmed accuracy and consistency by leading a team of three to audit a major financial institution's swap for dealer business continuity plan and policies.● Improved overall awareness within the organization by providing training sessions to colleagues, emphasizing the significance of diversity, equity, and inclusion in client proposals.

I have devised a fee-based global cyber-range exercise program for FS-ISAC members, partnering with an external vendor to train network defenders against ransomware, business e-mail compromise, and cloud security threats. I built tabletop exercise series in Europe, focusing on cross-border cyber-incident response among financial institutions and public-sector entities while actively contributing to planning exercises such as NATO's "Locked Shields."Key Achievements● Attracted 900 attendees by organizing and leading the first US industry summit on COVID-19 with the US Department of Health and Human Services, the US Treasury Department, and financial institutions.● Organized global webinars on pandemic-related technology issues, engaging 3,000 participants in discussions about remote work challenges and 2,400+ participants in strategies for returning to normal operations.● Achieved set performance goals by managing a team of four resiliency professionals, building an industry exercise program, and delivering tabletop and functional exercises on physical and cyber threats.● Executed "Hamilton Series" tabletop exercises worldwide, simulating malware and cyber-attacks on third-party suppliers by liaising with US government agencies and the Financial Services Sector Coordinating Council.● Cultivated public-private partnerships with local emergency response agencies during physical and cyber incidents by overseeing the Northeast first regional coalition in Northeast US.● Updated coordination and response efforts by directing the industry crisis response team for natural disasters.

New York

I built and managed Citi's Global Infectious Disease playbook, assessing the impact of health threats in 101 countries. I have acted multiple terms as Chair of SIFMA's Business Continuity Strategic Planning Committee, setting priorities for the securities industry and addressing business continuity requirements and issues for the Consolidated Audit Trail (CAT) and Regulation Systems Compliance and Integrity (Reg SCI).Key Achievements●Improved industry-wide preparedness by directing Citi's active participation in securities testing activities.●Managed Quantum Dawn 2, a sector-level exercise simulating a systemic cyber-attack on U.S. equities markets.●Led multi-phase pandemic exercise for public and private financial sectors with 100+ participants.●Addressed middle-Atlantic states’ impact by representing Citi in a FEMA-sponsored disaster tabletop exercise.●Oversaw an infectious disease planning working group within financial, cyber, and physical threats sectors.

Greater New York City Area

●Led Citi project to come into compliance with FINRA Rule 4370 on business continuity planning●Created first corporate-level business continuity planning policy for Citi ●Wrote Citi Pandemic Operating Plan and led Citi Pandemic Taskforce since 2007●Led BCP compliance activities for Citi’s corporate functions (Tax, Treasury, Finance, Human resources, etc.)●Created Crisis Event Expense Management Guidelines in order to facilitate re-imbursements and capture operational risk expenses for a disaster event ●Managed Citi business continuity crisis calls for the 2003 Northeast blackout●Expanded product-level connectivity testing in the securities industry to include commercial paper and foreign exchange●Act as Citi representative to United States Centers for Disease Control Corporate Roundtable. A public-private partnership to evaluate global health threats

New York

Greater New York City Area

Greater New York City Area

Greater New York City Area

Greater New York City Area

Certificate, E-Business Development, A/4.0

I studied the marketing and creation of new e-Businesses

Bba, Management Information Systems And Services

My focus was on the development of computer systems and the programming languages that supported them