Jay Atum Email & Phone Number

Houston, Tx, Us

• Conduct comprehensive risk assessments and analyses, identifying and evaluating potential risks across various business functions and processes.• Develop and implement risk management strategies to mitigate identified risks, ensuring alignment with regulatory requirements and industry best practices.• Utilize ServiceNow and other GRC software platforms to track and manage risk-related activities, maintaining accurate records and documentation.• Lead the preparation and execution of compliance audits, achieving a 95% average compliance rating over the past two fiscal years.• Collaborate with cross-functional teams to enhance incident response protocols, reducing average response time by 20%.• Provide regular updates and reports to senior management on risk exposure, compliance status, and mitigation efforts, facilitating informed decision-making.• Conduct vendor risk assessments and due diligence activities, ensuring third-party vendors meet Energy Transfer's security and compliance standards.• Possessed the ability to work independently, taking ownership of tasks and becoming a self-starting contributor to the GRC team.• Communicated effectively in technical and non-technical language, bridging the gap between IT and business stakeholders.• Proficiency in industry control frameworks (NIST 800-53, NIST CSF, ISO 27001/27002)• Reviewed, developed, and implemented vendor security agreements and security exceptions to control standards.• Conducted risk/security assessments of suppliers and third-party relationships, identifying, validating, and remediating risks.• Performed ongoing monitoring of suppliers and third parties to ensure compliance with regulatory requirements.• Conducted technical security reviews and assessments of vendors and suppliers.• Experienced with COSO, FISCAM, PCI-DSS, HIPAA, ISO 27000, FISMA, NIST SP 800-53 Rev 4 series, or other risk control frameworks.

United States

• Conducted comprehensive risk assessments and developed mitigation strategies, contributing to a 15% reduction in operational risks over a two-year period.• Managed the implementation and optimization of ServiceNow GRC platform, streamlining processes and improving efficiency by 20%.• Analyzed and interpreted complex data sets using advanced Excel functions, resulting in a 25% improvement in data accuracy.• Collaborated cross-functionally to ensure compliance with regulatory requirements, achieving a 95% compliance rate across all business units.• Led incident response efforts, reducing response time by 30% and minimizing the impact of security breaches.• Facilitated training sessions for 50+ employees on risk management best practices and utilization of GRC tools.• Utilized Tableau for data visualization, creating interactive dashboards to monitor key risk indicators and trends.• Conducted monthly audits to evaluate internal controls, identifying and addressing deficiencies to enhance operational effectiveness.• Acted as a liaison between internal stakeholders and external auditors, ensuring smooth audit processes and timely resolution of findings.• Developed and maintained documentation of policies, procedures, and protocols, ensuring alignment with industry standards and best practices.• Provided regular reports and presentations to senior management, highlighting key risk metrics and recommendations for improvement.