Jonathan Boxwell, Mba Email & Phone Number

Towson, Md, Us

Baltimore, Maryland, United States

Implementation and oversight of the Compliance Program, including overseeing annual audits for the company to maintain their ISO 27001 and SOC II certifications, working with various internal and external audit teams to identify and report on the effectiveness and efficiency of the policies and procedures, and ensure the continued adoption, maturity, and growth of the Compliance Program at CreditXpert.

Cockeysville, Maryland

Focused on Governance, Risk and Compliance in the areas of 3rd Party Vendor Risk Analysis, Security Awareness Training, Policy development, and contract reviews.Perform 3rd Party Vendor security reviews to evaluate and advise on security risks involved with security postures, IT security control effectiveness, and data protection practices of vendors interacting with company data or network.Review and advise legal department on security language in contracts, such as data protection clauses, privacy statements, and regulatory requirements to align vendors with the company security posture and standards.Create, design, and implement monthly Security Awareness Training campaigns to aid in the prevention of cyber-attacks through the direct education of ~10,000 end users. Review and implement security policies and a policy exception processes to drive internal and external IT compliance toward the security standards of the company.Advise on and create various process workflows within the security team to increase efficiency and collaborative nature of day to day work shared by the team.Create meaningful and valuable metrics on a weekly basis to highlight the volume, trends, and effectiveness of security controls put in place by the security team

Baltimore, Maryland Area

Established and managed team of IT professionals to act as single point of contact for IT risk, governance, and compliance requests from internal and external auditors. Raised compliance level with audit demands such as, SOC 1 and SOC 2, SOX, SSAE16, and healthcare regulations audits while, saving 35% of the time spent by directors and vice presidents in responding to audit requests.Landed new large group accounts through direct management of external questionnaires solicited by potential customers in RFP process comprised of 25 - 350 IT and IT security compliance items. Acted as liaison to internal audit departments regarding validation and effectiveness of financial and IT related processes through coordination, tracking, escalation, and translation of technical concepts into nontechnical language, leading to consistency in understanding of IT control implementation.Trimmed external regulatory and audit approval process time by 75 percent through the preparation of records summarizing hundreds of IT and compliance-related inquiries into concise written communications for executive management, including vice presidents and corporate attorneys. Further streamlined legal approval process by applying legal concepts and phrasing to compliance responses.

Baltimore, Maryland Area

Managed a team of 14 quality auditors that validated enrollment, membership, inquiry and claims data based on customer experiences directly with provider and through online and phone customer service interaction. Drove a data driven branding analysis, protection and reporting team in responses to parent company to protect the marketing of brand logos and evaluate the quality of our reputation in comparison with peer companies across nation. Evaluated customer satisfaction, potential risk to company brand, and public image exposure by establishing a dashboard and delivering executive level reporting on brand protection program, member satisfaction results, audit demand, and other analytical data which used for strategic planning purposes.

Baltimore, Maryland Area

Established metrics driven performance assessment program using financial data and other industry metrics related to member experiences to aid senior management in strategic planning and goal setting. Designed, implemented and maintained User Access Review strategy and tool for company to respond to and provide evidence for logical access requirements of SOC 1 / SAS70 controls which provided evidence for over 120K user accounts and led to stronger controls.

Baltimore, Maryland Area

Created User Support processes and documentation for supporting customers visiting our websites. Applied usability design and support paths for possible user base that has the potential of 3.5 Million users.

Washington D.C. Metro Area

Installed, configured, and maintained 15 Windows servers. Also supported print server environment and responded to network and desktop service desk requests for 500 associates

Master Of Business Administration - Mba, Management Information Systems And Services

Joseph A. Sellinger, S.J. School of Business & Management (AACSB Accredited)

Bachelor Of Science - Bs