Iliyan Iliev, Ctprp Email & Phone Number

Grafton, Wisconsin, United States

• Revamped a third-party risk program worth $29 million to align with OCC regulations, resulting in a significant reduction in compliance issues and a more robust risk management framework• Audited approximately 130 vendors and products, updating profiles and discovering 58 additional vendors, improving vendor management visibility by 45%• Requested, analyzed, and compiled contracts (SoWs, License Agreements, MSAs) for 30+ vendors, ensuring compliance with FFIEC and OCC requirements and integrating 8 critical addendums to meet regulatory standards• Created comprehensive templates and standards for SOC reviews, Business Continuity, Incident Response, Disaster Recovery, Exit Plans, Financial reviews, and contract reviews, with criteria to trigger each review based on vendor risk ratings• Completed annual user access reviews across 15 roles to ensure least privilege access and mitigate security risks• Spearheaded a data classification and retention initiative, collaborating with 15+ data owners to establish and schedule retention periods for customer data, ensuring compliance with internal policies and regulatory requirements, reducing data storage costs by 60%• Analyzed and reviewed 40+ information security reports weekly to proactively monitor access surges, malware threats, changes in user data, and unauthorized account modifications

West Allis, Wisconsin, United States

• Directed the development of a risk management framework that is currently utilized by over 5 departments across the bank, ensuring consistent compliance with OCC and FFIEC regulations while enhancing interdepartmental collaboration• Evaluated level of risk of over 20 new and existing third parties by conducting information security reviews including SOC 1 and SOC 2 report evaluations• Assessed thorough due diligence assessments on potential vendors, evaluating their financial stability, security controls, and regulatory compliance• Communicated and coordinated cross-functionally with Legal, IT, Finance, Compliance, and InfoSec to gather, address, and complete scoped risk assessments

Philadelphia, Pennsylvania, United States

• Facilitated end-to-end the risk program for a Banking and Capital Markets client worth $2.2 million• Monitored 5 KPIs to ensure deadlines were met and addressed and corrected any misses• Completed 91 QCs and maintained a 0% miss rate over 12 months on assessments ranging from 35 questions to 400 questions while identifying and remediating Type 1/2/3 errors• Created and reported on business heat maps to managers and senior managers on timeliness, quality, volumes, and margins on all engagements while escalating red areas and providing remediation or mitigation• Generated operational, volume, and findings management reports and presented them to clients showing the status of their cybersecurity program and targeted focus areas to reach program maturity• Coordinated ~25 findings calls and kick-off calls in the past year (2021-2022), which resulted in the closure of 161 findings

Milwaukee, Wisconsin, United States

• Ran 36+ experiments through EIRC's risk intake process while documenting, addressing, and closing risk findings through exceptions and remediations to achieve product authorization to operate (ATO)• Analyzed and aggregated Archer UTAN data elements and compiled them into a PowerBI report for SLT to focus in on bottlenecks, inconsistencies, and points of focus along the ATO process• Analyzed, assessed, and compartmentalized complex IT systems and processes and communicated those parts while ensuring the integrity of the whole to Directors, Engineers, and various other Enterprise leaders in clearly defined, easily understood ways through Confluence pages, PowerPoints, or diagrams• Streamlined Vendor Management Process by introducing new product tool (“BitSight”) to Innovation and Sourcing & Procurement Directors which assessed vendors based on their security score

Greater Milwaukee Area

• Documented and maintained project artifacts such as project charters, communication logs, action items, monthly status reports, and schedules for upwards of 10 simultaneous projects such as I.T. Service Catalog, Lynda Migration, Image Now, F5, SM-Apply, I.T. Procurement, I.T. Reclassification• Coordinated and scheduled meetings between internal stakeholders ranging from Directors, SME's, and Project Managers• Implemented a note-taking system during meetings to improve coordination and help eliminate redundancies in action items

Guantanamo Bay, Cuba

• Was involved in Operation Enduring Freedom from 2016 to 2017

Bachelor Of Science - Bs, Information Technology

Bachelor Of Arts - Ba, Philosophy