Jon Whelan Email & Phone Number

Focus on maturing Cyber & IT Control Library. Lead the collaboration with IT & Cyber Operational teams to identify controls currently in place and proactively identify opportunities to strengthen control design to meet compliance requirements. Identify synergies across numerous compliance frameworks to gain efficiencies during assessments.

Louisville, Kentucky Area

Third Party Risk Management (TPRM) - Conduct detailed Third Party Risk Assessments using SIG Questionnaire. Work closely with key partners to identify and evaluate risk levels and presenting control deficiencies, findings, and recommendations to various levels of owners and leadership.• Conduct security audits of third party vendors using a multitude of frameworks, industry best practices, and tools. These include but are not limited to: Shared Assessments SIG and SIG Lite, HIPAA, HITRUST, SOC2 Type2, ISO27001, NIST, Penetration Test, BitSight, Archer, etc.• Interpret, identify, and prioritize risk of third parties based on impact and likelihood.• Work directly with key stakeholders to facilitate information risk analysis and risk management processed, identify acceptable levels of risk, and establish roles and responsibilities with regards to information risk management. • Provide guidance by scheduling/conducting kickoff meetings, reoccurring status meetings, reviewing/approving initial remediation plans and supportive evidence submissions for ensuring vendor has met the recommendations for remediation. • Conduct issue management, to ensure remediation is completed in a timely manner.• Report engagement status and results, both verbally and in writing, to leadership.• Conduct team development by providing training on processes and responsibilities by developing guidelines for handling daily operations.