Marcia Xavier Email & Phone Number

Washington, Dc, Us

Boston, Massachusetts, Us

OutSystems is a low-code platform with the great mission of giving every organization the power to innovate through software. At scale! At OutSystems I am responsible for the Information Security Office, leading all aspects of security for the organization.

Washington, District Of Columbia, Us

Upside is a digital marketplace that connects millions of consumers with brick and mortar retailers nationwide. Since 2016, Upside's personalized offers have empowered individuals to gain greater purchasing power for their essential needs and helped businesses achieve measurable profits. Billions of dollars in commerce run through the Upside platform every year, and that value goes directly back to our retailers, the consumers they serve, and towards important sustainability initiatives.At Upside, I am responsible for leading the Information Office, comprised of IT and all areas of Information Security.

Washington, District Of Columbia, Us

Equip women in need in our community on their path to financial independence by providing them with professional attire, coaching, and skills training

Washington, D.C., Us

Led our team of talented Security Engineers and Analysts, providing vital security functions such as Application Security/ DevSecOps, Consumer Security and Fraud Prevention, Security Architecture, Security Operations/SOC & Incident Response, Sales Support, and Governance, Risk and Compliance (GRC).

Washington, D.C., Us

Our team grew and increased scope in 2020! I have the privilege of leading an incredibly talented team of Strategy Analysts and Security Engineers. Together, our mission is to foster a balanced & proactive approach to security; assisting the CISO in curating a program for Rally that is focused on risk reduction while supporting our business. Our main responsibilities are:Processes/Programs we own and execute:1. Vulnerability Management - from scanning/identification to remediation tracking. Our approach is to fully engage with system owners and help with prioritization (not just to throw a vulnerability scan over the fence!) so that we can, together, optimize resource utilization v.s. risk reduction 2. Cloud Security for our AWS environments - setting standards/requirements & partnering with system owners to incorporate security in infrastructure management/deployment (for both traditional and container/DevOps-based environments);3. Risk Management - yearly assessment to ensure we mitigated critical risks; tracking of treatment plans; training and engaging leaders to foster awareness and identification/treatment of risks; 4. Vendor Risk Management - assessment and tracking of the security posture of vendors/potential vendors; Overall Security Governance:1. Security Policy Ownership & Management 2. Control Library Management - collaborating across Rally to design/update necessary security processes. Including yearly alignment with Risk Management Program to ensure existing controls cover critical risks3. Internal Assessments - testing the effectiveness of our key security processes4. External Audit Support - SOC 2 Type 2 & HITRUST5. Security Awareness & Engagement - security awareness training, phishing-resistance training campaigns AND our new program to engage all Rallyers in the Security Program so expectations are clear throughout the organization

Washington, D.C., Us

Basking Ridge, Nj, Us

Led a team of professionals engaged in information protection/assurance audit projects across the enterprise.

Washington, Dc, Us

★ Responsible for cybersecurity risk and compliance, directing five professionals engaged in IT and Information Security risk management, SOX and HITRUST compliance initiatives, third-party risk assessment, and policy development.★ Advises senior leaders through KPI reports and summaries of risk and mitigation strategies.★ Provided guidance and direction to the Head of Information Security with respect to the formulation of an Information Security Strategy as a business enabler for the enterprise.★ Led IT/IS risk assessments across the organization, in accordance with ISO 27001 and NIST 800-30 standards; tracked risk mitigation initiatives towards all goals and deliverables.★ Assessed compliance with ISO 27001/27002 standards and audit-readiness for Sarbanes Oxley and HITRUST requirements through self-assessments.★ Designed security and privacy controls to maintain compliance with the requirements of HIPAA regarding sensitive client information.★ Trains data owners in the proper handling of Protected Health Information (PHI) in accordance with HIPAA regulatory requirements and corporate policies.★ Administers the control framework governing compliance with a variety of privacy regulations, including HIPAA, and EU Privacy/GDPR.☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲ABOUT FTI CONSULTINGFTI Consulting, Inc. is an independent global business advisory firm dedicated to helping organizations manage change, mitigate risk and resolve disputes: financial, legal, operational, political & regulatory, reputational and transactional. FTI Consulting professionals, located in all major business centers throughout the world, work closely with clients to anticipate, illuminate and overcome complex business challenges and opportunities.

New York, Ny, Us

★ Directed client engagements, advancing to the role of Senior-in-Charge within one year.★ Recognized as as a regional subject matter expert on Risk Advisory for New System Implementations.★ Administered external IT audits, focusing on the evaluation of SOX and FSA controls, for clients in multiple industries.★ Created recommendations to help clients maintain SOX compliance and mitigate risk during major transitions in their IT infrastructure.★ Trained colleagues to build knowledge and skills in system implementation risk assessments and audits, strengthening overall team effectiveness.★ Recipient of the Encore Award for service excellence each year, and on occasion more than once annually.☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲ABOUT KPMG USKPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States.

Stamford, Ct, Us

★ Learned English within one year, resulting in a promotion to Senior Consultant overseeing engagements for international clients, translating between English and Portuguese.★ Created customized solutions and strategies aligned with the unique needs of each account.★ Effectively translated business requirements into functional plans to guide development and programming efforts, including a software application for billing for Telefonica, the largest telephone company in South America.★ Led on-site training sessions to educate clients on how to support each software application following deployment.☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲☲ABOUT PITNEY BOWESPitney Bowes is a global technology company crafting innovative products and solutions that help clients “get it right” in the complex world of commerce in the areas of customer information management, location intelligence, customer engagement, shipping and mailing, and global ecommerce.

• Developed software applications designed for the fitness industry • Wrote technical documentation and training materials• Provided technical support to clients

Bachelor’S Degree, Management Information Systems, General

Management Information Systems