Jim A. Email & Phone Number

Summit, Nj, Us

West Hartford, Connecticut, Us

Expanded vCISO Services and Increased Revenue:- Led the expansion of existing vCISO teams to deliver world-class performance, resulting in a significant increase in revenue and capabilities. - Defined go-to-market strategies to enhance service visibility and attract new clients. Manages a team of seven vCISOs, analysts, security engineers, and consultants, fostering collaboration and excellence in service delivery. -Developed the methodology and approach to aid SEC registrants with new Cybersecurity requirements. Created CMMC and NIST 800.171 Compliance Solutions: - Responsible for overseeing CMMC and NIST 800.171 compliance efforts for six companies, ensuring adherence to regulatory requirements and industry standards.--- Developed an end-to-end methodology for CMMC implementation, optimizing efficiency and effectiveness in compliance processes. - Established strategic partnerships with GCC High integrators / GRC tool vendors to rapidly advance clients' compliance goals.

Pittsford, Ny, Us

Virtual Chief Information Security Officer (vCISO) for Multiple Organizations: - Served as a trusted vCISO for multiple organizations across diverse business sectors. -Provided strategic guidance and leadership in information security and risk management. -Implemented effective security measures and ensured compliance with industry standards.Processes and Controls for Information Security Compliance Programs: - Established robust processes and controls for information security compliance programs. - Expertise in frameworks including NIST, FFIEC, HIPAA, CIS18, ISO27001, CMMC, etc. -Led efforts to help a client achieve both SOC2 and ISO27001 certifications simultaneously. Ensured adherence to regulatory requirements and industry best practices.Information Security Governance and Incident Response Leadership: - Established information security governance structures, including steering committees, policies, procedures, metrics, and reporting. - Led incident response activities for a targeted, advanced ransomware attack. - Successfully rebuilt consumer confidence and restored trust in a leading printing company after a data breach.

San Francisco, California, Us

First Line of Defense Implementation for Digital Banking and Consumer Banking Technology: - Successfully implemented and directed the First Line of Defense for Digital Banking and Consumer Banking Technology, covering multiple areas of risk including Information Security, Audit, Operational Risk, Payment systems, Issues, Compliance, and Models.- Led the implementation of Front Line controls to mitigate various MRAs and Issues. - Implemented strategies to ensure regulatory compliance, protect sensitive data, and mitigate operational risks. Risk and Controls Development:- Led the development of risks and controls for Digital Banking as part of an enterprise Risk Controls Self-Assessment (RCSA) program. - Leveraged expertise in risk and cybersecurity to identify potential vulnerabilities and establish robust controls. - Designed and implemented effective risk management frameworks in support of sanction order remediation.Risk Management Strategy for Mobile-First Initiative: -Developed the risk management strategy for the firm's Mobile-First initiative, which involved redesigning the entire mobile banking application. - Implemented strategies to ensure digital banking services' security, integrity, and availability while enhancing the customer experience.

New Brunswick, New Jersey, Us

Providing insight and instruction on Cybersecurity and Risk Management within the Rutgers program.

New York, New York, Us

Turned a firm-wide vision into reality by building a technology audit practice, suitable for a new Top 10 national accounting firm. Also established a highly successful Cybersecurity consulting practice from scratch. Achieved considerable recognition internally and externally through sales skills, public speaking, and executive presentations. - Established the new technology audit methodology, tools, standards, etc., which added immediate value as well as passed PCAOB examinations and peer-reviews. - In charge of risk and control evaluations across a wide array of clients from all sectors. - Served as the lead investigator for five state Attorneys General, on a mega-breach while also managing the response team. - Directed a Technology Managed Services practice providing technology outsourcing solutions to the SMB market. - Augmented the cyber practice with a Manage Detect and Respond (MDR) capability after building a team in India and partnering with advanced threat detection companies. - Directed an IT Managed Services practice for SMB clients. - Built a consulting methodology around the new Innovation Lab capabilities, which compressed timelines from consulting engagements from months to weeks.- Established the first technology audit and cyber team in India.- Created a decision support tool to determine which of the firms 2,000 clients would be selected for IT audits. - Helped a global wealth management company determine which strategic IT initiatives should be pursued based on a custom methodology.- Served on the USA Cyber Task Force.- Established a vendor management program for a large wealth management company.- Gave dozens of presentations at regional and local conferences on cyber risk and security.

New York, Ny, Us

I taught Technology Risk Management part-time at the Graduate School of Continuing Professional Education, as part of the Masters in Management & Systems program. I custom-developed this course based on my experience and leading research in the field.I also served as the Thesis Advisor for several graduate students to assist them with their Masters thesis, in the areas of Risk, Security and Governance.

Menlo Park, California, Us

Helped build a highly successful management-consulting practice focusing on technology risk. Led engagement planning and project management of a wide variety of clients that ranged from start-ups, middle-market, government entities, and Fortune 500. - Oversaw the creation and implementation of a global information security framework across 26 countries for a major insurance company. The engagement won a company award for the best project by the client. - Created the technology diligence methodology and then served as the lead director overseeing high-profile due diligence engagements for private equity clients. - Served as one of the engagement leaders to implement technology and information security controls at one of the largest wealth management companies in the world.- Served a diverse client portfolio including serving some of the largest companies in the US and Japan, performing controls, cybersecurity, privacy, and IT audit services. - Created the firm's IT Governance methodology and used it on several high-profile clients.- Performed strategic risk assessments on key clients to identify cost savings opportunities and help better align enterprise goals with capabilities and resources.

London, Gb

• Selected to serve as engagement manager for technology assessments at 5 of the firm's Top 50 accounts due to strong history of performance and client service. • Worked in conjunction with the Advanced Security Center to assess and manage cybersecurity risks and threats at leading clients.• Led an engagement to assess IT controls, including a technical review of security, for a major telecom provider and one of the largest clients in the firm.• Created the CIO Executive Forum for industry leaders with Stevens Institute of Technology.• Led a project risk management initiative at a top Pharmaceutical company which helped prioritize a $20 Million security and technology budget.

New York, Ny, Us

• Served as Engagement Manager on several of the firm’s largest and premier audit clients for technology risk and business process reviews Responsible for all aspects of engagement including planning, strategy, execution of audit procedures, managing financial and technical auditors, and relationship management with C-level executives.• Led numerous information security assessments at leading clients, including assessing application and infrastructure technology and security risks across 200 applications at a top investment bank.• Piloted the firm's Web Banking risk assessment as well Digital Assurance seal on top clients. • Managed internal and external audit engagements covering diverse industries and technologies using a proprietary process-based audit and risk assessment framework. • Selected by senior leadership to be part of a three-person national team to develop methodologies and a go-to-market strategy for the Industrial Markets Practice.• Identified previously undetected fraudulent entities in a complex, $600 Million bank fraud.• Project Manager for the implementation of a secure, portfolio viewing system for a major Swiss bank.• Assisted NYPD with social network and statistical analyses which led to several hundred arrests in a major, global internet crime. The case won an award by the High Tech Crimes Investigators Association (HTCIA).• Presented a paper on bridging social network analysis and other quantitative models on business process reviews at a global sociology conference in Cancun, Mexico.

• Performed information security and technology audits of high-risk systems.• Reviewed a new Institutional Sales system for internal and regulatory standards and security protocols.• Performed review of Margin Department’s business process and IT controls and relevant regulations.• Custom developed a workflow management system to track the status of audits and observations

Paris, Fr, Fr

• Designed and coded a secure enterprise asset management system that allowed CIO to save $3 Million in contract costs by tracking and aggregating corporate assets. Presented an award from the CIO and VP.• Performed coding in SAS to monitor IT performance metrics and assist VP in acquiring data for key projects.• Developed and executed coding revisions to support life insurance products (COBOL, Assembly, and JCL) and improve production performance. Results reduced run time on selected jobs from 8+ hours to under 1 hour.• Performed feasibility study for Senior VP on migrating division’s infrastructure from COBOL/IMS platform to Client-Server using Microfocus COBOL and associated tools.

Ba, Journalism & Mass Communications

Master Of Science (M.S.), Information Management

Graduate Coursework In Accounting, Audit, And Finance

Advanced Computer Programming Certificate