Business-first risk management professional, experienced in Information Security & Privacy risks.Strong track record of building & maturing Information Security & Privacy risk management programs. Experience in FinTech, TenEx (Tenant Experience), financial services & professional services firms - including complex, global, big data analytics & cloud environments & SaaS platforms.Excel at communications across stakeholders, including technical and non-technical teams: engineers, product managers, finance, HR, clients, auditors, executives, legal & others.Comfortable working with external parties, including clients during the sales cycle, vendors during security diligence, and auditors as required. Strong record of minimizing the time engineers spend with clients (during pre-sales diligence process) and auditors (3rd party auditors, client auditors, etc.). Knowledgeable of common risk frameworks, standards and regulations including SOC2, HIPAA, ISO, GDPR, CCPA, NIST, SIG AUP, Sarbanes-Oxley (“SOx”) and others.
Listed skills include Information Security, Incident Response, Privacy Law, Security, and 26 others.