Principal - Information Privacy & Risk Management (Global Business Services, Grc)
Enterprise Risk Management: Led Global Business Services (GBS) risk assessment process for Enterprise Risk Management (ERM), collaborating cross-functionally to research top risk trends in the industry, identify company-wide and functional risks, and prioritize/address risks.Risk Management Framework and Compliance Management: Managed maturation of compliance and risk management framework, revising policies and standards.Regulatory Compliance and Sarbanes-Oxley Act, FCPA, ITAR, and GDPR: Drove compliance with local, state, federal, international, and industry laws and regulations, including Sarbanes-Oxley (SOX), Foreign Corrupt Practices Act (FCPA), International Traffic in Arms Regulations (ITAR), Export/Import, and privacy, such as EU General Data Protection Regulations (GDPR).Trend Research and Risk Analysis: Researched emerging risk trends and identifies organizational processes to implement privacy, governance, and/or risk mitigation initiatives.Team Leadership and Third Party Risk Management (TPRM): Served as team lead and primary point of contact for Information Security, Privacy, Records Management, Business Continuity, Legal (ISPARCL) review process, coordinating cross-functionally with other SMEs to assess 100+ suppliers per year. Advised business units on procuring services and tools from third parties.Data Analysis, Presentations, and Strategy Implementation: Aggregated data and presented synthesized findings to technical and non-technical audiences, guiding information technology (IT), legal, and finance teams to seamlessly implement risk mitigation strategies. Obtained Raytheon Six Sigma Specialist Certification.GBS, Privacy Protection, and Internal Audit: Earned accolades for significant contributions to GBS. This included advancing Privacy Shield certification efforts, as well as supporting the execution of an internal audit and a comprehensive third-party assessment of Raytheon’s GDPR compliance and overall global privacy operations.