Lacey Baese Email & Phone Number

In this position, I spearheaded the creation of a thorough policy exception process, ensuring it was fully prepared for deployment by the end of the contract period, all while adhering closely to established timelines. I streamlined document organization and supervised daily policy-risk activities while introducing a BPMN policy exception framework, complete with refined processes, metrics, and reporting mechanisms.Key Accomplishments: • Met GRC program management contract objectives within one quarter through close collaboration with the team director and manager, surpassing anticipated outcomes.• Established a BPMN policy exception process, procedure, metrics, and reporting while streamliningdocument organization structure and managing the daily policy-risk program.• Improved security policy exception reporting KPIs by over 50%, enhancing transparency in addressing security vulnerabilities.• Identified pivotal Web3 integration prospects and offered strategic counsel to strengthen company security protocols, fortifying digital infrastructure and mitigating evolving risks.• Streamlined document organization and structure.

I coordinated extensive risk analysis and response strategies to resolve information security policy gaps across diverse organizational units, including privacy, legal, internal audit, and security architecture teams. These efforts were meticulously aligned with industry standards and regulatory requirements. Additionally, I promoted cybersecurity awareness by creating and distributing informational postcards at conferences, disseminating crucial security practices, and fostering a culture of vigilance among attendees.Key Accomplishments:• Led a team in conducting regular policy exception analyses, including interviews with BISOs and SMEs, and facilitating CISO adjudication through requester remediation processes.• Crafted 15 security policies encompassing vendor management, change management, physical, and data security, aligned with global controls and laws (e.g., PCI-DSS, GDPR), and subject to annual review to maintain compliance.• Developed and published a tailored information security policy for hotel environments, translated into six languages for accessibility across diverse international settings.• Coordinated risk analysis and response of information security policy gaps for multiple organizations, including Privacy, Legal, audit and compliance, Security Architecture, and information technology development.• Collaborated with internal and external subject matter experts (SMEs) to develop succinct security awareness materials customized for hotel and corporate colleagues, promoting a culture of cybersecurity vigilance and compliance.• Customized dynamic dashboard reports in ServiceNow and Tableau to enable leaders to promptly monitor and address compliance metrics specific to their domains.• Advised on cloud computing security regulatory compliance for cybersecurity policy.

I established and led a proficient InfoSec governance team comprising four experts, overseeing roadmap development, stakeholder engagement, KPI implementation, recruitment, and strategic planning to drive organizational security objectives. I nurtured interdisciplinary collaboration to improve governance practices and delivered insights on risk exposure for targeted scenarios to cybersecurity leadership by conducting FAIR analyses and enabling proactive risk mitigation practices.Key Accomplishments in InfoSec and IT Development:• Founded and led the InfoSec Governance team of 4 governance experts.• Oversaw the revision, visualization, and organization of one policy, 17 standards, and various processes across five languages.• Coordinated with the CISO on policy determinations, delivering reports to the senior director for seamless alignment between decision-making and operational goals.• Incorporated regulatory and discretionary sources and frameworks (e.g., NIST 800-53, CSF, CCPA, PCI-DSS, HIPAA, SOX) into corporate policies and standards by constructing an interactive security controls tool.• Reported risk exposure of targeted scenarios using quantitative risk analysis to cybersecurity leadership.• Implemented secure AS2 and SFTP exchange infrastructure linking internal teams with global vendors, encompassing network diagrams, hardware setup, firewall arrangement, access control, cryptographic certificate exchange, multiplatform scripts, and websites.• Provided on-call assistance for designated regions and coordinated with incident response teams to address issues within a 24-hour timeframe, sustaining optimal system performance.• Designed and programmed a web and database application for managing truckloads, delivering a scalable and efficient solution customized to operational requirements.• Improved and built applications across Unix, Windows, web, and database platforms to enhance functionality.

Bentonville, Arkansas

Bentonville, Arkansas

Bentonville, Arkansas

• Architected AS2 and SFTP exchange from internal teams to worldwide vendors, including networkdiagrams, hardware installation, firewall configuration, access control, cryptographic certificateexchange, multiplatform scripts, and websites.• Developed and maintained EDI software, scripts, websites, hardware, technical documentation, and communications for AS2 and SFTP exchange between Walmart and vendors globally.• Supported and led agile projects that replaced obsolete, critical global systems within 1 year with little disruption to suppliers or Walmart systems.• Supported area on call and collaborated with incident response teams to resolve issues within 24hours.

Bentonville, Ar

• Led and developed the multi-year web design, coding, and database creation of the Truckload Optimization (TLO) application.• Led a yearlong Windows Server migration project for all applications in the Replenishment Development area.• Supported Replenishment's frontend on call rotation and improved support documentation.• Optimized and created applications across Unix, Windows, web, and database platforms.