As Director of Cloud Risk Management, I strategically identify, assess, and mitigate risks associated with public and private cloud technologies. My focus spans data security, compliance, vendor management, incident response planning, and stakeholder communication.* Formulated comprehensive risk strategies that led to significant enhancements in regulatory compliance, positioning Schwab as a leader in cloud security practices.* Fostered collaboration among cross-functional teams, resulting in a unified approach to risk management that aligns with Schwab’s organizational objectives and culture.* Delivered training and guidance to over 150 colleagues in 1LOD and 2LOD, instilling best practices in cloud security and cultivating a mindset of risk-conscious innovation throughout the firm.* Regularly assessed risk management strategies, yielding measurable improvements in operational resilience and agility in addressing evolving cloud trends and threats.* Championed the integration of continuous monitoring practices, maintaining a secure cloud environment while maximizing the advantages of cloud technology.* Played a key role in incident response planning, enhancing Schwab’s preparedness and ability to swiftly address potential security breaches or compliance issues.* Conducted risk assessments for high-risk vendors, ensuring robust vendor management and protecting sensitive data from third-party vulnerabilities.* Implemented innovative solutions to address emerging risks, ensuring Schwab remains proactive in a rapidly changing technological landscape.Through strategic leadership and adaptive strategies, I play a pivotal role in enabling secure cloud operations that support Schwab’s mission and objectives.

* Developed and integrated a comprehensive security model that enhanced Schwab’s data protection framework.* Partnered with cross-functional teams to implement processes and technologies that effectively minimized data exposure risks, providing actionable insights through innovative reporting mechanisms.* Contributed to the design and implementation of security principles and standards that align with industry best practices.* Authored and communicated security standards and policies, providing training to ensure employees were equipped to uphold data protection measures.* Collaborated with development and infrastructure teams to ensure robust controls were in place for sensitive data protection.* Engaged with business contacts to influence technology controls and risk mitigation strategies, promoting a proactive approach to application and data security.* Conducted research to identify new attack vectors, serving as a subject matter expert on emerging data security threats.* Ensured compliance of internally hosted and cloud applications with established standards and policies through close collaboration with business partners.* Delivered expert security consulting, offering design reviews and recommendations for IT projects to bolster data protection.* Developed processes that aided management in identifying and remediating data security issues, fostering a culture of continuous improvement.* Collaborated with the IT team to deploy a data classification tool, ensuring proper protection for t tagged data.* Partnered with federal regulators and auditors on audits, owning data protection controls to maintain compliance with regulations.* Reviewed cybersecurity controls per FINRA standards to safeguard sensitive customer information.* Managed inquiries related to data protection regulations, ensuring prompt and effective responses.

* Oversee the Corporate IT Compliance Program, functioning as an independent and objective body that reviews and evaluates compliance issues/concerns within the organization.* Conduct periodic internal reviews or audits to ensure that compliance procedures are followed* Conduct or direct the internal investigation of compliance issues* Assess product, compliance, or operational risks and develop risk management strategies* Identify compliance issues that require follow-up or investigation* Verify that software technology is in place to adequately provide oversight and monitoring in all required areas* Maintain documentation of compliance activities, such as complaints received or investigation outcomes* Manage all audits, compliance, and regulatory activities, including, but not limited to: PCI, SSAE16, Sarbanes-Oxley (SOX), ISO27001 year around* Inventory all applicable regulatory requirements, incorporating into a single, unified framework* Provide assistance to internal or external auditors in compliance reviews* Responsible for integrating newly acquired companies as part of SOX and SSAE scope* Responsible for integration with other non-IT compliance organizations (Human Resources, Finance, Supply Chain, Trade Compliance, others) for organizational compliance requirements.* Manage and implement internal security initiatives and projects* Besides compliance audits, leading Information Technology-oriented projects and internal audits such as Business Continuity Planning (BCP), Disaster Recovery (DR), Logical Security Access, Policies and Procedures, Change Management, System Implementation Reviews, Software Licensing, Asset Management, Network and Application Security, and Data Privacy* Perform vendor risk assessments, security assessments, and create a risk register for Security & Compliance team* Manage relationships with IT security vendors for vendor accountability and security effectiveness

* Maintain, manage and continuously review operational information security standards, corporate policy and Internal Business Controls, in support of Applied Materials' global workforce. Partner with business units/regions' needs in selecting, implementing and sustaining reasonable and appropriate controls* Support global IT operations staff in assessing risks for new, modified, enhanced and legacy information systems, networks, data access services, business transformation, mergers and acquisitions. * Perform regular self-assessments on behalf of all Applied Materials business units and regions sufficient to assist them in maintaining the desired risk posture through standardized analysis processes, and full disclosure reports aligned to internal business controls and external regulatory/compliance needs* Support all significant changes or investment in applications, core IT infrastructure, information handling and BPO, geographical footprint changes and regulatory impacts that map to information assets or information processing systems.* Hands on experience with Security monitoring tools such as Qualys, ISS, ESM, McAfee DLP, Encryption, Other audit technologies* Responsible for the design, implementation, configuration and support of DLP solutions for Applied Materials

* Lead and assist on IT/Integrated audits and advisory projects. * Lead and assist in the development of technology and automation for the IA team * Delivery of data analytics to increase the effectiveness and productivity of the IA function* Help to champion tools and automation techniques and capabilities within the IA team.* Auditing SOX Controls to ensure requirements are met* Audit experience for compliance with policies and procedures, identification of internal business control (BC) weaknesses, identifying IT problems or weaknesses, and identification of areas for areas of strategic or efficiency improvement.* Knowledge of AMAT and Compliance Policies including: GAAP, Finance Policies, Quality Policies, GMRM, IBC's Audit techniques including: risk analysis, sampling, process mapping* Communicated with all levels of management, including presenting presentations to functional and corporate management.* Prepare and review written audit reports based on fieldwork and follow up on the implementation of prior audit comments and formal management recommendations.

Responsibilities include leading projects, translating customer requirements into project specifications; reporting regularly on project progress; ensuring adherence to standardized implementation processes; developing and maintaining the project plan; ensuring progress against established milestones; conducting risk assessments and developing mitigation plans; creating and communicating project scorecard; escalating issues when appropriate.

* Production Support Lead in Applied Materials* Supporting all applications across eGlobal Operations, including Oracle, SAP, SAP, e2Open, P2I and others* Tasks include support, development and project management for IT enhancements