Andy Ly Email & Phone Number

Tampa, Fl, Us

• Risk Assessment and Management: Conduct regular risk assessments to identify vulnerabilities in systems, networks, and applications, and implement strategies to mitigate risks and enhance security• Security Monitoring and Incident Response: Monitor system and network activities to detect potential security breaches, and respond to incidents to minimize damage and ensure system integrity• Compliance and Regulatory Adherence: Ensure that systems and processes meet internal security policies and external regulatory requirements (e.g., GDPR, HIPAA, NIST), and assist in audits and compliance assessments• Security Protocol Implementation: Develop and enforce security policies and procedures, including access controls, encryption standards, and disaster recovery plans to safeguard sensitive information• Continuous Security Improvement: Regularly review and update security measures, perform penetration testing, and implement new technologies or processes to improve the organization’s security posture

Beaverton, Or, Us

10-month sprint focused on identifying key areas for potential automation implementation across Converse departments• Managed the development, implementation, and continuous improvement of the Automation program, establishing robust procedures and documentation to ensure longevity and scalability• Led the modernization of legacy platforms into an advanced modeling dashboard to prioritize waste reduction opportunities through novel KPIs, improving work processes and strategic labor allocation and enabling data- driven decisions with easily digestible dashboards for C-suite executives• Conducted cross-functional working sessions with thought leaders across different departments to identify potential automation projects, utilizing feasibility studies and ROI analyses, resulting in $500K projected annual cost savings through reduced manual efforts and the establishment of a robust project pipeline

Beaverton, Or, Us

• Led reviews of digital products for consumers, vendors and internal users, ensuring accurate privacy controls for low to medium risk efforts• Collaborated with privacy counsel to identify potential areas of non-compliance with privacy laws and regulations• Conducted analysis to deliver guidance, ensuring consumer experiences are consistent with Nike privacy principles and expectations• Promoted privacy standard methodologies through consistent analysis, feedback, and follow-through with product and engineering teams• Updated existing and develop new privacy policies, contract templates, and procedures to ensure compliance with applicable laws and regulations• Maintained accurate and up-to-date records of privacy incidents, data inventories and data maps • Facilitated privacy awareness across the organisation through the creation of privacy-related training material • Mitigated privacy risks associated with AI/ML, IoT, and cloud solutions throughout their lifecycle, from data ingestion to model deployment, developing comprehensive risk remediation roadmaps and implementing privacy- enhancing controls, leading to the successful adoption of differential privacy techniques in AI models and zero- trust architecture for cloud-based data storage

With a focus on the reforestation of the Amazon rainforest surrounding the town, I collaborated with local communities and the indigenous people of Puyo to create a sustainable environment and infrastructure to support future generations.On a daily basis, I supported: • Bioconstruction - sustainable infrastructure • Reforestation of forests with native forest species• Education on sustainability best practices • Cleaning and planting of vegetation designed to feed the native fauna• Biological practices in sampling birds and amphibians• Laboratory work

Houston, Tx, Us

Technology & Privacy Risk Management• Created and supported Privacy Impact Assessments (PIA) to review information for completeness and accuracy, identifying items for follow-up, updating systems and tracking activities methodically • Collaborated with team members to conduct risk assessments of emerging technologies such as artificial intelligence, machine learning, internet of things, and cloud solutions, following up on progress of remediation activities including risk remediation roadmaps, control monitoring and review• Leveraged OneTrust to facilitate data mapping, data inventories, data subject rights requests and incident managementConfidentiality & Privacy Strategic Priorities• Engaged in projects to implement or enhance the Clients' confidentiality and privacy programs – development of training and awareness materials, support of Data Classification and awareness of Data Subject Access Requests• Supported confidentiality and privacy program assessments and system reviews of confidentiality & privacy risks• Conducted data analytics efforts to identify insights, potential risks, and mitigation strategiesData Analysis & Implementation • Ran high-level comparable company and other types of analysis based on data collected• Conducted financial modeling, including forecasting and planning• Analysed and remediated over tens of thousands of employee data for Client, creating dashboards and visualisations to better inform employee performance Internal Initiatives• Authored and designed monthly newsletters to increase employee engagement regarding education and celebration for the LGBTQIA+ community, creating safe spaces and increasing overall diversity and inclusion

Barcelona, Es

• Created a personal communication stream that bridged the gap between customers and management on rental platforms such as Airbnb, achieving a 30% increase in positive customer ratings • Analyzed and drafted financial reports and projected returns of potential properties for investors using discounted cash flow analysis in conjunction with multiple variable linear regression, resulting in the addition of two new mid-city properties within Barcelona