Advising clients on Information Security Governance and Regulatory issues, IT Risk Management and Compliance, and Enterprise Security Programs

▪ Manage the daily operations of the Business Information Security Office (BISO) which partners with Senior Leaders and their teams to securely operate more than 900 distributed applications across 30,000 servers. ▪ Oversee IT risk, information security, and compliance for all enterprise platforms, including Loyalty, Accounts Receivable, Salesforce, and Global Customer Serving.▪ Manage a $1.7 Million operating budget and oversee a team of 60 employees across 3 Unit CIO teams. Directly supervise 5 Information Security Managers and Information Security Analysts.▪ Provide leadership to Technology and Business teams for 20 domains and advise on methods to secure and protect their applications and customer data. ▪ Partner with 3 Unit CIO teams to understand the measurement of, and risk-reducing actions available for, 100+ Key Risk Indicators for IT and IS. ▪ Track progress of technology risk issues, meet weekly with Risk Champions from each area and advise and coach them on methods to reduce and manage risk effectively. Key Accomplishments▪ Designed and launched “Application Health” across all Technology teams in 2019, a simplified mechanism for displaying Inherent and Residual risk for application owners. Successfully drove overall risk reduction by 18% in the 1st 6 months of operation in 2019 and achieved a 28% risk reduction to date in 2020.▪ Partnered with Technology teams and Security Control Owners to migrate infrastructure vulnerability reports from a monthly spreadsheet-based process to a daily on-demand process that leveraged a technology risk portal. Reduced high risk infrastructure vulnerabilities by 75% in the 1st year of migration and enabled improvements such as re-scan requests and on-demand assistance.▪ Created and established the BISO role in 2016, serving as the primary Information Security liaison to 9 Unit CIO technology teams, coordinating 60 Risk Champions to manage security and compliance actions across those teams.

▪ Provided leadership to Engineering and Development for Access Management of all AXP Technologies, including customer and employee Single Sign-On. ▪ Developed and implemented new identity management services, including Mobile, Biometric, Step-Up Authentication, OAuth, VPN, Certificate Management, and Claims-Based Identity Services. ▪ Managed a $10+ Million operating budget and oversaw a team of 14 colleagues and 70+ contractors. Directly supervised 14 Engineers and Project Managers.▪ Monitored security breaches and developed tools to reduce malicious attacks on American Express applications. ▪ Led authentication integrations, including securing new applications, federated identity solutions, and deliveries. ▪ Complied and revamped the Access Management strategy annually. Updated it with current needs for availability and new authentication features and secured funding to execute plans. ▪ Oversaw and managed the delivery of new integrations for authentication and authorization services, including standard integration models and those with new capability needs. ▪ Managed system availability at >%99.99 for production and pre-production environments and enabled automated regression and capacity testing to ensure robust new product releases. Key Accomplishments ▪ Enabled SSO as the 1st Geographically Distributed, Highly Available (GDHA) distributed application at American Express to support the development of a 2nd AXP datacenter. Successfully certified the solution to enable savings of more than $800 Million annually. ▪ Won the AXP Chairman’s Award for Technologies Excellence in 2013 for delivering GDHA and achieving the highest availability rating in the financial services industry.▪ Delivered multiple “First AXP Implementations”, including a Certificate Management System, an automated datacenter failover, OAuth and SAML Federation, Mobile and Biometric authentication, and Claims-Based access, enabling step-up authentication for fraud reduction.

▪ Completed 3-year platform strategies for Web Services and Messaging Utilities. ▪ Implemented a simple PKI certificate acquisition system with a 3rd party vendor, Cybertrust, which was acquired by Verizon, to increase security for application web service implementations.Key Accomplishments▪ Delivered the 1st web services UDDI Registry at AXP, which housed 300+ entries, promoting re-use and security, and established web services & SOA standards, tools, and infrastructure in use by over 200 applications▪ Developed and implemented a plan to improve employee engagement scores by an average of 14% in all measured dimensions. This included increases by 22% for “My Leader” and 28% for “Teamwork”.

▪ Founded and managed a software consulting company that grew to peak revenues of $3+ Million and employed more than 35 consultants. ▪ Successfully negotiated contracts with local companies and provided consultants to companies such as Honeywell, Motorola, and American Express. ▪ Led Technical delivery teams responsible for development of various B2B and B2E, web-based systems to support both customer and helpdesk style functions for businesses. ▪ Developed and launched Online Wallet and Smartcard reader merchant form filling technology, Corporate Purchasing Card website, Small Business Services website, Quicken Financial management and modernized Customer Servicing tools.▪ Operated the business from the ground up and completed all business tasks, including interviewing and hiring, bookkeeping and accounting, contract management, payroll, and tax filing.