Neil Lamis Email & Phone Number

United States

-IMPLEMENTED NIST 800-171 COMPLIANCE AND INCIDENT RESPONSE: PMO leader of team that responded to major information security incident and hardened environment to become compliant with Department of Defense (DoD) Cybersecurity Maturity Model Certification (CMMC).-ENHANCED INFORMATION SECURITY MANAGEMENT SYSTEM (ISMS): Suggested enhancements to new or existing IT policies, completed capabilities and controls gap analysis, and advised client on implementation of ISO27001/2.-IMPROVED I&T RISK MANAGEMENT: Advised IT CRO on the design and implementation of an I&TRM framework and operating model to support post-merged credit union.

https://convergentcyber.us

-ARCHITECTED I&TRM MATURITY ASSESSMENT FRAMEWORK: Developed leading practices framework, tools, and reporting to conduct repeatable maturity assessments of first, second, and third line IS and IT risk management program and capabilities.-IMPROVED I&T RISK ASSESSMENT AND MANAGEMENT GLOBALLY BY PIONEERING THE I&T RISK MANAGEMENT FRAMEWORK AND DYNAMIC RISK ASSESSMENT (DRA) SOLUTION: Designed leading practice I&T risk and control “blueprints” and taxonomy for DRA/GRC platform to enable consistent risk assessments across the enterprise; Developed an enterprise RCSA risk assessment and prioritization framework to identify risk-based IT processes for credible challenge; Drafted enterprise internal control management standard and credible challenge procedures.-REDUCED IT GENERAL CONTROLS (ITGC) SARBANES-OXLEY (SOX) DEFICIENCIES BY 50% OVER PRIOR YEAR AUDIT: Led team in rewriting 200+ IT process narratives, implementing continuous control monitoring of select ITGCs, and facilitating process and control owner engagement through design of onboarding and training materials.-IMPROVED BANK CAPITAL IT RISK MANAGEMENT AND COMPREHENSIVE CAPITAL ANALYSIS AND REVIEW (CCAR) PROGRAMS: Developed IT scenario analysis awareness guidance to enable more sustainable and accurate CCAR across business units; Researched and developed benchmark/leading practice case studies and socialized recommendations to executive management to improve CCAR program.-IMPLEMENTED EXTERNAL LOSS DATA (ELD) REPORTING DATABASE: Developed reporting database within company “homegrown” forms/tools, related procedures, and communication for rollout across the enterprise. This was instrumental in gaining detailed insights into enterprise IT risks. -I&T RISK REPORTING (KEY RISK INDICATORS/RISK METRICS) PROCESS IMPROVEMENTS: Executed credible challenge on over 100+ GLBA metrics and worked with CISO team to reduce reporting errors, consolidate, and consider additional metrics to ensure comprehensive risk coverage.

EXECUTIVE PERFORMANCE BENCHMARKS-ASSESSED, DESIGNED, AND IMPLEMENTED MULTIPLE I&T GOVERNANCE, RISK, AND COMPLIANCE PROGRAMS: Performed maturity assessments of multiple Fortune 500 company first, second, and third line of defense IS and IT governance, risk management, and compliance programs/capabilities, identified observations and gaps, proposed leading practice recommendations, and socialized prioritized strategic transformation roadmaps to elevate program maturity.-GLOBAL COMPLIANCE TO REGULATORY REQUIREMENTS: Drafted IT risk and controls matrices, process narratives, and documentation standards to assess readiness for compliance with FFIEC, GLBA, CCPA/GDPR, and SOX regulatory requirements and maintain currency with evolving regulatory environment.-C-LEVEL INTEGRATED RISK MANAGEMENT THOUGHT LEADER TO THE BOARD AND CXO EXECUTIVES: Facilitated account team and client discussions to provide industry point-of-views on leading practices and roles and responsibilities for I&TRM across the three lines of defense; Firm go-to thought leader on I&TRM.-DEVELOPED DATA PRIVACY AUDIT FRAMEWORK: Created company risk and controls framework to assess clients’ data privacy operations readiness with CCPA, GDPR regulatory requirements. Highlighted deficiencies related to Notice and Consent, Privacy by Design, DSAR procedures, etc.

Manager creating the first Enterprise Risk Management (ERM) Department within Corporate Internal Audit responsible for providing leadership and support for the identification and monitoring of all risks across WellCare operating units.-RISK MANAGEMENT ARCHITECTURE: Established the ERM architecture for the company and the ERM framework; communicated the vision across the organization to gain stakeholder buy-in from business unit leaders.-IMPLEMENTATION OF RISK FRAMEWORK: Drafted and obtained approval of the first ERM Committee Risk Charter, reporting templates, communication process, executive training materials, and led the implementation of ERM across multiple departments and 11 business units identifying existing and emerging risk events, developing mitigation action plans, key risk indicators, and defining risk appetite and tolerance.-CONTINUOUS RISK MONITORING: Created the ERM quarterly reporting packages and disclosures for Board and Committee presentations and integrated the company risk profile into the development of the corporate annual audit plan.

The best job in life...leading All-American paratroopers!

Master Of Business Administration (Mba)

Bachelor'S Degree