Led large cross-functional team of engineers, product managers, analysts, and designers to create cutting edge, cloud-based, full stack in-house risk management platform fueled by real-time data and machine learning. Partnered with IT delivery, risk operations, enterprise teams (operational risk, compliance) and third-party vendors to support existing off-the-shelf application being replaced by new platform. Recruited, led and inspired, and developed product organization to develop and own roadmap to transform.Led program to translate business strategies into risk products that satisfy customers and position company for competitive advantage and disruption. Drove requirements and deliverables, collaborated with delivery team and internal partners, and leveraged Agile methodology to create architecture, common capabilities, data environment, and user facing services.• Released first production capabilities on new platform in support of enterprise program to drive controls identification and assessment. Features on new platform exceeded established goal of 50% improvement in PURE (practical usability rating by experts) user experience measurement compared to existing application.• Initiated transformation effort to migrate and stream risk data to target state cloud environment, partnering with key stakeholders. Established collective goal to reduce data footprint by 50%. Utilized target state analytic tools to prototype and implement risk dashboards and reports leveraged by chief risk officer and line of business presidents.

Led team of professionals charged with providing advice and guidance to leaders across retail bank on potential risks across all categories of risk framework. Served as key operational and strategic leader focusing on portfolio of risks including identity and access management, data governance, business resilience/continuity, cyber, and third-party (vendor) risk management. Provided risk management consultation to business leaders on conducting risk assessments, developing mitigation plans, overseeing operational losses, managing compliance, and performing other risk management and control activities. Led governance and delivery teams that provided regulatory focused controls monitoring on behalf of retail business. Developed and delivered senior-level risk management reporting and communications to retail's risk oversight committee. • Transformed business controls monitoring from periodic and sample-based methodology to automated and full population approach. Drove cost reduction in monitoring and business operations teams, enhanced identification of control breakdowns, and improved results from audit and exams.• Collaborated with commercial and small business banking groups to define reputation risk intent for prohibited and high risk client businesses, resulting in closing of high risk accounts.• Enhanced divisional risk metrics, reporting, and analysis, with focus on customer impact, to drive business behavior to getting operations right first time and speed customer recovery when breakdowns occurred with reporting contributed to reduction in aged customer events of over 75%. • Drove 90% reduction in significant business continuity gaps, tripled number of critical applications migrated to corporate identity and access management solution, and authored first resolution plan (living will) for retail bank with zero regulatory feedback.

Held a variety of technology and cyber risk roles, leading technology risk and process management function. Accounted for responsibilities within cyber risk organization that included providing consulting expertise on eCommerce offerings and business acquisitions, leading security engineering teams, creating third-party risk function, centralizing access management and running access operations, and performing external vulnerability and penetration testing. Led risk team to drive technology controls enhancements across all elements of IT lifecycle. Advised technology senior leadership on controls, risk, and event management and provided controls testing services, which included critical Sarbanes-Oxley controls. Led enterprise center of excellence for process management. Provided comprehensive suite of process related learnings including Lean and Six Sigma. Defined and implemented corporate standards for critical process definition, documentation, management, and certification. Held annual process excellence forums to raise level of awareness and enhancement of process centric mindsets and skills.

Performed in-depth security assessments, including system-level technical assessments, vulnerability scans, and physical/online penetration tests. Partnered with national office to evaluate, test, and enhance automated audit software application deployed to several thousand auditors in US. Led training and rollout, and established internet and e-commerce security advisory practice in Chicago region. Developed business plan, hired consultants, and grew revenue of practice. Advised one of largest banking institutions in North America on security posture of e-commerce capabilities prior to launch, preventing major consumer online banking site from going live with major vulnerabilities.