Jim A. work email
- Valid
- Valid
- Valid
- Valid
Jim A. personal email
Jim A. phone numbers
Recognized for helping public and private companies understand and mitigate cybersecurity and technology risks.Presented with a lifetime achievement award by ISACA for "outstanding contributions to the field of IT Risk, Governance and Information Security."Diversified background encompassing application development, audit, risk management, and consulting, characterized by a business-oriented mindset and the ability to implement systemic programs.Expert in transforming risk functions and establishing robust IT/Security Governance, having consulted with hundreds of companies ranging from the Middle Market to Fortune 500.
-
Director Of Advisory ServicesCompassmspSummit, Nj, Us -
Vciso And Cybersecurity Advisory & Compliance LeaderCompassmsp Sep 2023 - PresentWest Hartford, Connecticut, UsExpanded vCISO Services and Increased Revenue:- Led the expansion of existing vCISO teams to deliver world-class performance, resulting in a significant increase in revenue and capabilities. - Defined go-to-market strategies to enhance service visibility and attract new clients. Manages a team of seven vCISOs, analysts, security engineers, and consultants, fostering collaboration and excellence in service delivery. -Developed the methodology and approach to aid SEC registrants with new Cybersecurity requirements. Created CMMC and NIST 800.171 Compliance Solutions: - Responsible for overseeing CMMC and NIST 800.171 compliance efforts for six companies, ensuring adherence to regulatory requirements and industry standards.--- Developed an end-to-end methodology for CMMC implementation, optimizing efficiency and effectiveness in compliance processes. - Established strategic partnerships with GCC High integrators / GRC tool vendors to rapidly advance clients' compliance goals. -
Virtual CisoIgi Cybersecurity Aug 2021 - Sep 2023Pittsford, Ny, UsVirtual Chief Information Security Officer (vCISO) for Multiple Organizations: - Served as a trusted vCISO for multiple organizations across diverse business sectors. -Provided strategic guidance and leadership in information security and risk management. -Implemented effective security measures and ensured compliance with industry standards.Processes and Controls for Information Security Compliance Programs: - Established robust processes and controls for information security compliance programs. - Expertise in frameworks including NIST, FFIEC, HIPAA, CIS18, ISO27001, CMMC, etc. -Led efforts to help a client achieve both SOC2 and ISO27001 certifications simultaneously. Ensured adherence to regulatory requirements and industry best practices.Information Security Governance and Incident Response Leadership: - Established information security governance structures, including steering committees, policies, procedures, metrics, and reporting. - Led incident response activities for a targeted, advanced ransomware attack. - Successfully rebuilt consumer confidence and restored trust in a leading printing company after a data breach. -
Director And Risk Management And Controls LeadWells Fargo Sep 2017 - Aug 2021San Francisco, California, UsFirst Line of Defense Implementation for Digital Banking and Consumer Banking Technology: - Successfully implemented and directed the First Line of Defense for Digital Banking and Consumer Banking Technology, covering multiple areas of risk including Information Security, Audit, Operational Risk, Payment systems, Issues, Compliance, and Models.- Led the implementation of Front Line controls to mitigate various MRAs and Issues. - Implemented strategies to ensure regulatory compliance, protect sensitive data, and mitigate operational risks. Risk and Controls Development:- Led the development of risks and controls for Digital Banking as part of an enterprise Risk Controls Self-Assessment (RCSA) program. - Leveraged expertise in risk and cybersecurity to identify potential vulnerabilities and establish robust controls. - Designed and implemented effective risk management frameworks in support of sanction order remediation.Risk Management Strategy for Mobile-First Initiative: -Developed the risk management strategy for the firm's Mobile-First initiative, which involved redesigning the entire mobile banking application. - Implemented strategies to ensure digital banking services' security, integrity, and availability while enhancing the customer experience. -
Advisory Board MemberRutgers University Continuing Education Mar 2018 - Jun 2020New Brunswick, New Jersey, UsProviding insight and instruction on Cybersecurity and Risk Management within the Rutgers program. -
Managing Director: Cybersecurity And Technology Risk ManagementCohnreznick Llp Oct 2012 - Sep 2017New York, New York, UsTurned a firm-wide vision into reality by building a technology audit practice, suitable for a new Top 10 national accounting firm. Also established a highly successful Cybersecurity consulting practice from scratch. Achieved considerable recognition internally and externally through sales skills, public speaking, and executive presentations. - Established the new technology audit methodology, tools, standards, etc., which added immediate value as well as passed PCAOB examinations and peer-reviews. - In charge of risk and control evaluations across a wide array of clients from all sectors. - Served as the lead investigator for five state Attorneys General, on a mega-breach while also managing the response team. - Directed a Technology Managed Services practice providing technology outsourcing solutions to the SMB market. - Augmented the cyber practice with a Manage Detect and Respond (MDR) capability after building a team in India and partnering with advanced threat detection companies. - Directed an IT Managed Services practice for SMB clients. - Built a consulting methodology around the new Innovation Lab capabilities, which compressed timelines from consulting engagements from months to weeks.- Established the first technology audit and cyber team in India.- Created a decision support tool to determine which of the firms 2,000 clients would be selected for IT audits. - Helped a global wealth management company determine which strategic IT initiatives should be pursued based on a custom methodology.- Served on the USA Cyber Task Force.- Established a vendor management program for a large wealth management company.- Gave dozens of presentations at regional and local conferences on cyber risk and security. -
Adjunct Professor - Risk ManagementNew York University Aug 2010 - Oct 2014New York, Ny, UsI taught Technology Risk Management part-time at the Graduate School of Continuing Professional Education, as part of the Masters in Management & Systems program. I custom-developed this course based on my experience and leading research in the field.I also served as the Thesis Advisor for several graduate students to assist them with their Masters thesis, in the areas of Risk, Security and Governance. -
Director - Technology RiskProtiviti Nov 2006 - Oct 2012Menlo Park, California, UsHelped build a highly successful management-consulting practice focusing on technology risk. Led engagement planning and project management of a wide variety of clients that ranged from start-ups, middle-market, government entities, and Fortune 500. - Oversaw the creation and implementation of a global information security framework across 26 countries for a major insurance company. The engagement won a company award for the best project by the client. - Created the technology diligence methodology and then served as the lead director overseeing high-profile due diligence engagements for private equity clients. - Served as one of the engagement leaders to implement technology and information security controls at one of the largest wealth management companies in the world.- Served a diverse client portfolio including serving some of the largest companies in the US and Japan, performing controls, cybersecurity, privacy, and IT audit services. - Created the firm's IT Governance methodology and used it on several high-profile clients.- Performed strategic risk assessments on key clients to identify cost savings opportunities and help better align enterprise goals with capabilities and resources. -
Senior Manager - Technology & Security Risk ServicesEy Oct 2004 - Nov 2006London, Gb• Selected to serve as engagement manager for technology assessments at 5 of the firm's Top 50 accounts due to strong history of performance and client service. • Worked in conjunction with the Advanced Security Center to assess and manage cybersecurity risks and threats at leading clients.• Led an engagement to assess IT controls, including a technical review of security, for a major telecom provider and one of the largest clients in the firm.• Created the CIO Executive Forum for industry leaders with Stevens Institute of Technology.• Led a project risk management initiative at a top Pharmaceutical company which helped prioritize a $20 Million security and technology budget. -
Manager - Information Risk ManagementKpmg Llp Nov 1998 - Sep 2004New York, Ny, Us• Served as Engagement Manager on several of the firm’s largest and premier audit clients for technology risk and business process reviews Responsible for all aspects of engagement including planning, strategy, execution of audit procedures, managing financial and technical auditors, and relationship management with C-level executives.• Led numerous information security assessments at leading clients, including assessing application and infrastructure technology and security risks across 200 applications at a top investment bank.• Piloted the firm's Web Banking risk assessment as well Digital Assurance seal on top clients. • Managed internal and external audit engagements covering diverse industries and technologies using a proprietary process-based audit and risk assessment framework. • Selected by senior leadership to be part of a three-person national team to develop methodologies and a go-to-market strategy for the Industrial Markets Practice.• Identified previously undetected fraudulent entities in a complex, $600 Million bank fraud.• Project Manager for the implementation of a secure, portfolio viewing system for a major Swiss bank.• Assisted NYPD with social network and statistical analyses which led to several hundred arrests in a major, global internet crime. The case won an award by the High Tech Crimes Investigators Association (HTCIA).• Presented a paper on bridging social network analysis and other quantitative models on business process reviews at a global sociology conference in Cancun, Mexico. -
Technology And Information Security AuditorBear Stearns & Co. Oct 1997 - Oct 1998• Performed information security and technology audits of high-risk systems.• Reviewed a new Institutional Sales system for internal and regulatory standards and security protocols.• Performed review of Margin Department’s business process and IT controls and relevant regulations.• Custom developed a workflow management system to track the status of audits and observations
-
Programmer / Systems AnalystAxa Financial Group - Equitable Life Jan 1994 - Oct 1997Paris, Fr, Fr• Designed and coded a secure enterprise asset management system that allowed CIO to save $3 Million in contract costs by tracking and aggregating corporate assets. Presented an award from the CIO and VP.• Performed coding in SAS to monitor IT performance metrics and assist VP in acquiring data for key projects.• Developed and executed coding revisions to support life insurance products (COBOL, Assembly, and JCL) and improve production performance. Results reduced run time on selected jobs from 8+ hours to under 1 hour.• Performed feasibility study for Senior VP on migrating division’s infrastructure from COBOL/IMS platform to Client-Server using Microfocus COBOL and associated tools.
Jim A. Skills
Jim A. Education Details
-
Washington And Lee UniversityJournalism & Mass Communications -
Stevens Institute Of TechnologyInformation Management -
Fairleigh Dickinson University Silberman College Of BusinessAnd Finance -
Chubb InstituteAdvanced Computer Programming Certificate
Frequently Asked Questions about Jim A.
What company does Jim A. work for?
Jim A. works for Compassmsp
What is Jim A.'s role at the current company?
Jim A.'s current role is Director of Advisory Services.
What is Jim A.'s email address?
Jim A.'s email address is ja****@****iti.com
What is Jim A.'s direct phone number?
Jim A.'s direct phone number is +197371*****
What schools did Jim A. attend?
Jim A. attended Washington And Lee University, Stevens Institute Of Technology, Fairleigh Dickinson University Silberman College Of Business, Chubb Institute.
What are some of Jim A.'s interests?
Jim A. has interest in Wwii Era Military History, Etc, I Also Read Tons Of Books, Anything Involving A Bike, Any Outdoor Activity, Hiking Biking, Particularly Philosophy And Vietnam, Cyclocross Racing, Currently, Management Consulting.
What skills is Jim A. known for?
Jim A. has skills like Governance, Risk Management, It Audit, Enterprise Risk Management, Sarbanes Oxley Act, Internal Audit, Information Technology, Business Process, Cisa, Risk Assessment, Security, External Audit.
Who are Jim A.'s colleagues?
Jim A.'s colleagues are Lorinda Neal, Brooke Sheeler, Christopher Nguyen, Andrew Pabey, Christopher Wooden, Jonathan Campos, Tyler Smith.
Free Chrome Extension
Find emails, phones & company data instantly
Aero Online
Your AI prospecting assistant
Select data to include:
0 records × $0.02 per record
Download 750 million emails and 100 million phone numbers
Access emails and phone numbers of over 750 million business users. Instantly download verified profiles using 20+ filters, including location, job title, company, function, and industry.
Start your free trial