Jessica Abra Sandy, Ma Email & Phone Number
@uchicago.edu
4 phones found area 765, 312, and 773
LinkedIn matched
Who is Jessica Abra Sandy, Ma? Overview
A concise factual answer block for searchers comparing this professional profile.
Jessica Abra Sandy, Ma is listed as Governance, Risk, and Compliance Manager at University of Chicago, based in Greater Chicago Area, United States. AeroLeads shows a work email signal at uchicago.edu, phone signal with area code 765, 312, 773, and a matched LinkedIn profile for Jessica Abra Sandy, Ma.
Jessica Abra Sandy, Ma previously worked as IT Risk Analyst at The University Of Chicago and Manager, Front-end Development at The University Of Chicago. Jessica Abra Sandy, Ma holds Master Of Arts (M.A.) from University Of Chicago.
Email format at University of Chicago
This section adds company-level context without repeating Jessica Abra Sandy, Ma's masked contact details.
AeroLeads found 1 current-domain work email signal for Jessica Abra Sandy, Ma. Compare company email patterns before reaching out.
About Jessica Abra Sandy, Ma
SUMMARY: As the Governance, Risk, and Compliance Manager, I assess the University of Chicago’s compliance and risk posture. I lead the Risk Analyst team, utilizing a data-driven approach to implement a high-quality Risk Management program at an international research institution. Previously, I managed a Webby award winning team of designers and developers in the University's Web Services Department. I also served as the Senior Web and Technology Projects Manager at The Field Museum. I managed two major redesigns of the museum's website (over 4,000+ pages with 2 million annual unique visitors). I implemented ongoing visitor testing, behavioral tracking and analysis, and established digital visitorship KPIs.RISK AND AUDIT COMPETENCIES:- Regulatory frameworks: Experience assessing against HIPAA, HITRUST, NIST 800-171, NIST 800-53, NIST Cybersecurity Framework (CSF), PCI-DSS, GLBA, CJIS, NSPM-33- Reviewing and analyzing third-party audit documentation: SOC 1, SOC 2, HECVAT- Internal and external audit: Identifying risks and leading remediation efforts- Third-party risk concepts: Familiar with cybersecurity, compliance, information security, Environmental, Social, and Governance (ESG), strategic, operational, financial, reputational, supply chain, terms negotiation- Policies, standards, and guidelines: Experience writing and socializing, including Third-Party Assessment Policy, Information Security Policy, Written Information Security Policy (WISP), Acceptable Use Policy, End-User Device Security Policy, Information Systems Management Policy, Asset Management Standard, Vulnerability Management Standard, Data Classification GuidelinesCERTIFICATIONS:- Cybersecurity: SANS GIAC Security Essentials (GSEC), 2019- Project Management: Agile, 2011; Project Management Professional (PMP), 2009 - Management: American Management Association Certified Professional, 2010MEMBERSHIPS | RECENT PRESENTATIONS AND EVENTS:- Member, ISACA (Audit, Governance, Risk, Privacy, and Cybersecurity Association)- Member, ISAC (Educause Security Association)- Co-presenter, Educause Cybersecurity and Privacy Conference 2022 (Baltimore, MD) and 2023 (Seattle, WA), “Refining Annual Cybersecurity Assessments to an Obstreperously Decentralized Campus”- Event Host and Director, University Of Chicago Cybersecurity Symposium 2023, Chicago, IL- Event Host and Director, IvyPlus Information Security and Risk Conference 2020, Chicago, IL
Listed skills include Project Management, Software Documentation, Leadership, Social Media, and 35 others.
Jessica Abra Sandy, Ma's current company
Company context helps verify the profile and gives searchers a useful next step.
Jessica Abra Sandy, Ma work experience
A career timeline built from the work history available for this profile.
Governance, Risk, And Compliance Manager
Current- Perform security risk analyses and compliance assessments of third-parties in accordance with industry best practices to deliver comprehensive, contextualized, actionable data- Write and implement University policies and practices to ensure compliance with relevant legislation and legal interpretation- Build and mentor the University’s GRC team of six full time staff in order to effectively analyze third-party risks, conduct audits, identify vulnerabilities, and collaboratively develop remediation plans- Experience assessing against HIPAA, HITRUST, and NIST 800-171 control frameworks- Conceptualized and directed the University of Chicago’s first Cybersecurity Symposium which was Continuing Medical Education (CME) certified, with speakers from the medical research community, the FBI, and cybersecurity professionals- Utilize standard regulations and frameworks, including PCI-DSS, NIST 800-53, NIST 800-171, NIST CSF, HIPAA, GLBA, CJIS, etc.
It Risk Analyst
- Partnered with the Office of Legal Counsel to lead audit activities for multiple audits, and provided guidance and evidence of risk remediation to auditors- Led a two-year risk reduction initiative to perform CMMC assessments of departmental IT operations- Drafted, revised, and ratified multiple policies and standards, navigating them through the University's complex governance process- Implemented a vulnerability management program that used InsightVM- Implemented Security Awareness Training, developing content for multiple role-based courses- Performed a risk assessment of an aging PCI environment and working with key stakeholders to implement alternate compliant processes that removed the University’s network from scope, allowing the environment to be decommissioned. This resulted in $165,000 savings annually- Guest lecturer for MSBI 31300 Concepts in Computer Programming (Project Management) at the UChicago Graham School
Manager, Front-End Development
- Led a team of network engineers, system administrators, developers, and security engineers responsible for inventorying and assessing the website and application landscape, documenting all risks and recommending remediations- Cultivated long-term client relationships, reinforcing my team’s reputation for being collaborative and risk-conscious - Managed staff, strategic goals, and financial direction for Web Services - Client relationship management, cultivated ongoing relationships with clients to build trust- Maintained expert knowledge of user-centric design principles, web technologies, and best practices through training and research- Featured presenter and frequent collaborator with the Polsky Center for Entrepreneurship and Innovation- Featured presenter at the Ivy Plus Web Roundtable Conference, 2018
Senior Web And Technology Projects Manager
- Directed Technology Department projects: re-developing the Museum’s website, designing secure museum interactives, and overhauling the infrastructure supporting the security system- Developed and documented standard policies for artifact and specimen handling based on lending agreements and environmental risks- Determined the messaging strategy and engagement goals for the Field Museum across a variety of platforms and channels- Experienced in QA and UX testing, additionally skilled at synthesizing google analytics data, user testing data, and anecdotal evidence into product improvements- Managed a team of web developers and all web and application development projects- Brand and content management expertise- Managed the Museum Social Media Strategist and the Grainger Imaging Team
Web And Digital Media Projects Manager
- Conceptualized and managed the team that developed secure EMu/Drupal integration to search the Museum’s collections online - Developed a comprehensive social media strategy for the Field Museum across a variety of social platforms- Project Manager for developing a robust application system for Field Museum grants, research scholarships, graduate fellowships, Research for Undergraduates internships (REU), and residency programs
Manager Of Desktop Support And It Projects And Training Coordinator
- Led the Museum help desk, a three person team responsible for servicing a staff of over 500- Conducted third-party risk reviews and selections for Museum technology projects- Project Manager for fieldmuseum.org website rebuild, updating the Field Museum’s website from Dreamweaver to Drupal CMS
It Projects And Training Coordinator
-Designed and implemented Active Directory-based applications, a board of trustees portal, and staff intranet-Created and taught Core Technology Training and Security Awareness Training courses for staff
It Department Coordinator
-Assessed the risks of and then implemented third-party applications-Wrote, implemented, and enforced Museum IT policies and IT Service Level Agreements (SLA)
Assistant Program Administrator, Senior Community Service Employment Program
-Led reskilling technology training for program participants at national affiliate sites for a Department of Labor managed program
Jessica Abra Sandy, Ma education
Master Of Arts (M.A.)
B.M. And B.A., Music And English
Academic Honors Diploma
Frequently asked questions about Jessica Abra Sandy, Ma
Quick answers generated from the profile data available on this page.
What company does Jessica Abra Sandy, Ma work for?
Jessica Abra Sandy, Ma works for University of Chicago.
What is Jessica Abra Sandy, Ma's role at University of Chicago?
Jessica Abra Sandy, Ma is listed as Governance, Risk, and Compliance Manager at University of Chicago.
What is Jessica Abra Sandy, Ma's email address?
AeroLeads has found 1 work email signal at @uchicago.edu for Jessica Abra Sandy, Ma at University of Chicago.
What is Jessica Abra Sandy, Ma's phone number?
AeroLeads has found 4 phone signal(s) with area code 765, 312, 773 for Jessica Abra Sandy, Ma at University of Chicago.
Where is Jessica Abra Sandy, Ma based?
Jessica Abra Sandy, Ma is based in Greater Chicago Area, United States while working with University of Chicago.
What companies has Jessica Abra Sandy, Ma worked for?
Jessica Abra Sandy, Ma has worked for University Of Chicago, The University Of Chicago, The Field Museum, and Easter Seals.
How can I contact Jessica Abra Sandy, Ma?
You can use AeroLeads to view verified contact signals for Jessica Abra Sandy, Ma at University of Chicago, including work email, phone, and LinkedIn data when available.
What schools did Jessica Abra Sandy, Ma attend?
Jessica Abra Sandy, Ma holds Master Of Arts (M.A.) from University Of Chicago.
What skills is Jessica Abra Sandy, Ma known for?
Jessica Abra Sandy, Ma is listed with skills including Project Management, Software Documentation, Leadership, Social Media, Content Management, Nonprofits, Research, and Management.
Search by job title, company, industry, location, and seniority. Export verified B2B contact data when you need it.
Start free trial