Jenifer F. Email & Phone Number

New York, Ny, Us

In my role as the Vice President of IT and Enterprise Risk Management, I am entrusted with a range of critical responsibilities. These encompass comprehensive oversight of all IT operations, taking the lead in development of the corporate risk register alongside the management team, and providing insightful reporting on corporate goals and strategy. Moreover, I am involved in fortifying policies to adhere to the NIST Cybersecurity Framework, while actively seeking out avenues to bolster staff capabilities and communication through targeted training initiatives. Additionally, I engage in collaborative efforts with other companies within the ERO Enterprise, actively exchanging best practices to cultivate collective growth and advancement.

New York, New York

Managed NERC CIP compliance, ensuring technical adherence to Critical Infrastructure Protection Standards (CIPS). Conducted internal assessments, managed schedules, monitored performance, identified corrective actions, developed action plans, and actively promoted continuous improvement within the compliance program.

Performed qualitative risk analysis of Self Reports and Self Certifications Reviewed preventive, detective, and corrective controls to reduce the risk of potential violations, and determines the threat to the Bulk Electric System based on controls in place Evaluated, approved, and tracked the status of mitigation plansPerformed security audits to ensure entities are in compliance with NERC CIP standards. Audits include but are not limited to reviewing: Electronic Access Controls, Physical Access Controls, Account Management, Cyber Security Incident Response and Recovery PlanningPresented on best practices and audit approach at entity outreach events: CIP101 and Version 5 Roadshow

Answered basic questions about installation, operation, configuration, customization, and usage of products.Solved problems, investigated causes, and recommended solutions to correct failures.

Responsible for leading test efforts against software maintenance releasesFollowed the Waterfall Model of the Software Development Life CycleReviewed business requirements, created test plans, test cases, and spreadsheets for assigned projectsTesting efforts included, but were not limited to: validating role-based access control functionality, new account USA Patriot Act identification requirement functionality, database updates and document integrityAnalyzed test results and was responsible for tracking, researching and recommending solutions for correctionPerformed risk analysis and provided Exit Reports with “go, no go” recommendationReceived SQE Training in Systematic Software Testing and Test DesignKey achievements:Lead testing efforts on project to replace the middleware service that was utilized by six affiliate banks. As part of the project I ensured that database integrity was not compromised, as well as confirmed there was no data remanence within the application that would compromise client privacy and violate the GLBA privacy act

Kept branch in compliance with all bank policies and procedures, including: GLBA and USA Patriot ActResponsible for daily branch operations, including management of Tellers and Financial Service RepresentativesPrepared branch for internal audits and performed audits of internal controlsEnforced access controls, such as: dual control, separation of duties and mandatory vacations Prepared and conducted exercise drills of Business Continuity Plan

Layton Utah

Master Of Science (Ms), Information Assurance Emphasis In Cyber Security

Bachelor Of Science (Bs), Information Systems And Technology

Associate Of Science (As), General Studies