Jenny Cao Email & Phone Number

Mountain View, Ca, Us

- Conducts security and privacy risk assessments for third parties- Program manager for conduction reassessments on existing third parties

San Francisco, Ca, Us

- Conducts technical information security reviews of third parties. Reviews security controls and risks. - PM for the third party risk program. Manages security and compliance risks for data security and privacy related to third parties including partners and vendors. - PM for projects that facilitates GDPR, SOX, and other privacy regulations.

Oakland, California, Us

- Manages risk and compliance related to Information Security and the Software Development Lifecycle.- Lead the compliance program for the SDLC function. Ensured compliance with ISO 27001, NIST 800-53, MS-SDL, SOC 1 / 2, SOX ITGCs, DoD STIGs as well as internal company policies and standards- Developed audits and health checks for high risk processes or processes prone to rapid changes

Oakland, California, Us

- Identified weaknesses in IT and network controls, performed and managed audits, and lead remediation efforts in areas including access management, change management, data governance (eg. management of PII, DLP, flow and transfer of sensitive data etc.) utilization of third party open source code, network security etc.- Managed, tracked, and coordinated efforts to ensure compliance and timely delivery of solutions or remediation. - Developed reports, risk analysis, and metrics to track the status of risks, projects, and remediation plans.

Worldwide, Oo

* Consultant from August 2013 - July 2014* Analyst from January 2010 - August 2012 (worked as a coop student full time for 4-8 months each year during this time)- Performed information security and business process audits and reviews regarding IT, financial and operational risks. - Provided recommendations to improve internal controls and compliance. - Performed third party service provider audits (SSAE 16, SOC 1/2, CSAE 3416) for clients within the financial, government, consumer, and telecommunications industries. - Consulting and assurance in areas of logical access, information privacy, availability, secure coding and change management principles, and network security. - Remediation, risk assessments, gap analysis, control mapping/design, and interpreting regulation requirements into audit programs and actionable test procedures. - Assisted businesses to manage IT risk across a broad spectrum of technologies.

- Identified financial and operational risks for Tangible Gameworks and their clients; designed methods to mitigate or avoid risks.- Performed retrospective data analysis performance metrics- Conducted user research by collaborating with local (League of Legends) gamers and community leaders.

Houston, Texas, Us

- Identified and addressed customer concerns- Discuss strategies to enhance customer satisfaction and brand reputation

-Receptionist and general office assistant-Web design and coding

Master Of Accounting, Accounting

Back-End Web Development, Web Development

Science, Biotechnology/Chartered Accountancy

Education record

Education record

Education record

Education record