Jay Atum Email & Phone Number

United States

Experienced in Using Archer GRC tool to manage multiple control assessments such as documenting gap assessment, remediation, Third-party vendor risk assessment, data privacy compliance assessment, risk calculator, and risk acceptance.• Experienced in using Archer to create, manage, and enforce policies. Also, used Archer to identify, implement, and monitor controls.• Experience in using Logic Manager to manage the risks associated with data breaches and cyberattacks.• Led and managed the company's compliance program, overseeing SOX compliance, UARs, SAP integration, and transaction code reviews, ensuring adherence to regulatory standards and internal policies.• Executed SOX remediation activities meticulously, ensuring all internal controls were robust, compliant, and effectively addressing identified issues.• Reviewed transaction codes rigorously, guaranteeing compliance with SOX and other relevant regulations, maintaining accuracy and consistency across the organization.• Served as the primary point person for evaluating exception requests to policies and best practices, demonstrating a keen ability to assess compliance issues.• Effectively communicated with business colleagues in non-technical terms, translating complex technical information into understandable language to justify exceptions and analyze risks.• Conducted thorough risk assessments to understand potential exposures and determine the risk rate associated with exceptions, providing actionable insights to decision-makers.• Collaborated with stakeholders to propose solutions for exceptions, ensuring compliance while mitigating risks.• Exhibited strong analytical and problem-solving skills, identifying root causes of issues and proposing viable solutions.• Proficiency in industry control frameworks (NIST 800-53, NIST CSF, ISO 27001/27002• Experienced with COSO, FISCAM, PCIDSS, HIPAA, ISO 27000, FISMA, NIST SP 800-53 Rev 4 series, or other risk control frameworks.

United States

•Developed and implemented the enterprise-wide risk management framework, including policies, procedures, and tools to identify, assess, and mitigate risks.•Conducted risk assessments and gap analyses to identify and evaluate risks related to compliance, operations, and information security.•Collaborated with cross-functional teams to develop and implement risk mitigation strategies and action plans.•Conducted compliance audits and reviews to assess the effectiveness of controls and ensure compliance with applicable laws, regulations, and industry standards.•Developed and delivered risk management training programs to enhance risk awareness and foster a risk management culture across the organization.•Implemented key risk indicators (KRIs) and established monitoring mechanisms to track risk levels and identify emerging risks.•Prepared and presented risk and compliance reports to senior management, highlighting key findings, trends, and recommendations for risk mitigation.•Evaluated third-party entities' information security programs for acceptability.•Monitored regulatory developments and industry trends to ensure the organization's compliance with changing requirements. Monitored and tracked remediation activities to address weaknesses and issues discovered through security reviews.•Developed strategies to ensure compliance with security standards, regulatory requirements, and audit issues.•Provided periodic reporting of assessment findings, improvement recommendations, and associated risks.•Performed risk assessment and RCSAs to ensure compliance with all IT infrastructure policies and properly identify control deficiencies to mitigate the risk associated with the business process.•Monitoring and oversight functions where I was solely responsible for managing and monitoring different operational risk deliverables tied to various RCSA processes.•Focused on activities in emerging risk markets, high compliance risk locations, and transactions.