Kate Grimaldo Email & Phone Number

Austin, Texas, Us

- Responsible for the Indeed Security Control Library, providing a structured approach for Indeed to manage and mitigate security risks effectively and meet all of our security obligations. - Communicate expected security behaviors from the control library through policies, standards, and best practices that help teams establish, implement, and maintain a robust security posture.- Monitor changing regulatory requirements (privacy, AI, cloud security) to ensure our framework is comprehensive of all current and emerging security compliance requirements. - Triage opportunities for adding complexity to the control framework to unlock revenue streams - Track the health of controls in the security control library, enabling management and auditors to quickly ascertain the strength of our controls and inform gap and maturity prioritization work. - Act as subject matter expert on security principles, compliance frameworks, and regulatory requirements (e.g., SOC 2, CIS 20, GDPR, ISO 27001, NIST CSF).

Austin, Texas, Us

- Responsible for the design, development, implementation and monitoring of the Security Governance program and managing the Security Governance teams.-Coordinate and facilitate Security governance committees-Develop and manage security policies and standards including employee awareness-Develop and manage a comprehensive common control framework-Manage a robust field security program, to include oversight of customer assurance, and security evangelization activities-Assess and promote customer concerns, industry trends and changing regulatory requirements and appropriately adjust the scope to accommodate these changes-Oversee deployment and promote continuous improvement of Security Assurance technologies, automations and integrations

Seattle, Wa, Us

The Amazon Security Risk and Compliance team is focused on building and maturing the Information Security program for Whole Foods Market. Whole Foods is an Austin institution that has been successful in leading the world in providing natural and organic foods to its customers. My role at Amazon is to help build and manage technology risk capabilities, leveraging Amazon practices and technologies, to support the Company in meeting its growth objectives while reducing risk.

Seattle, Wa, Us

As an extension of the Amazon Physical Stores team • Evaluating and managing the risks related to Technology and Information Systems at Whole Foods Market.• Manage the IT compliance team and large cross-regional teams for annual Sarbanes-Oxley Section 404 audit and PCI-DSS assessment.• Perform detailed IT security assessments across the IT environment at Whole Foods Market including internal and external pen testing, evaluation of security vulnerabilities on new and existing critical applications.• Improve control and system design to meet internal and international regulatory requirements for compliance, privacy and data protection as well as to reduce security risk.• Manage third party risk assessments; including vendor selection, security control evaluation, contracting, on-going maintenance and risk acceptance.• Develop and maintain Information Security policies, procedures, standards and guidelines.• Assist management in making appropriate decisions based on data and metrics and an established risk and control framework.

Chicago, Illinois, Us

Contributing tangible value to our clients in the areas of business risk management, business processes evaluation, internal auditing, internal controls and regulatory compliance. We help our clients evaluate and improve the effectiveness and efficiency of operations, offer recommendations to improve, and assist clients as they design, build and operate new business processes, IT systems and other important changes in their business activities.Risk Advisory Services is responsible for providing internal audit, internal control and Sarbanes-Oxley services to dynamic organizations - across different industries. Responsible for planning and managing engagements, conducting fieldwork, discussing findings and observations during client exit meetings, reviewing staff work papers, and preparing written audit reports. Responsible for client service assistance such as advice on internal control approaches, best practices and helping clients deal with critical business issues. Specializing in Technology Risk Advisory to prepare clients for GLBA, FDICIA, FFIEC, SOC, SOX and ISO audits.

Gb

- Selected as senior auditor on one of PwC’s largest clients, listed on NYSE with over 28 billion in revenue. Recurring lead on PwC Denver’s largest audit client with 8 billion in revenue. - Liaison between PwC Partners, Client Audit Executives and IT Administrators - Planned and managed 500+ hour budgets with engagement teams of 3 or more associates to execute various audits- Organized, communicated and worked with component teams of 10+ people in Canada, UK and Central Europe- Planned and executed SOX 404 engagements- Evaluated business controls and issued SSAE 16/SOC1 reports- Performed testing of financial software including; data conversion, interfacing, and security.- Provided assurance over automated controls, key reports and spreadsheets.- Designed and performed internal audits around business operations

Researched and compiled valuation reportsRecruited and met with investorsCreated a master database of investments

Denver, Co, Us

Assisted senior portfolio manager, Communicated with high profile clients, Calculated net worth of clients

Seattle, Wa, Us

Recorded and managed in-store fundsAttended regular customer satisfaction workshopsLearned conflict resolution strategies

Bacc, Accounting

Bachelor Of Science - Bsacc, Accounting

Diploma