Oge Davis Email & Phone Number

Remote

Remote

Primary Responsibilities:Analyzes risks and supports vendor/partner risk assessment activitiesReviews vendor-provided security artifacts (e.g., SOC 2 reports, ISO 27001 certifications, Cyber insurance, SIG questionnaires, etc.)Understands technical implementation details necessary to assess vendor and partner security controlsContributes to the development of the information security requirements of vendor and customer security control requirements to ensure Uphold’s information assets are protected, and follows Uphold policies, standards and compliance obligationsParticipates in the development and oversight of required corrective action plans relating to vendor and partner security compliance issuesIdentifies, researches, and evaluates new vendor/partner compliance requirements and presents them to relevant stakeholdersAssists in the development and implementation of risk management across information security and data privacy programs to ensure information security risks are identified and monitoredPartners with incident response and cyber threat intelligence in post-incident reviews, and in providing advice, analysis, and insight to the teams and individuals involved in cyber defense and responseManages assessment/audit timeline for questionnaires, interviews, evidence verification, and report preparationProactively identifies and develops recommendations to information security and cyber risk issues and vulnerabilities by working with multiple teams including privacy, compliance, internal audit, legal, HR, information technology, etc.Reviews and negotiates InfoSec contractual terms in vendor/customer contracts

Raleigh, North Carolina, United States

Primary Responsibilities: • Responsible for developing and executing IT governance, risk and compliance procedures within the Bank• Strong knowledge of regulatory requirements and guidelines including those from the FFIEC and associated organizations • Responsible for conducting best practices research, resolving control issues and independently assessing IT risk

Enterprise Security Services (ESS) is responsible for lifecycle management and engineering of all current and future security products, platforms and services. Responsibilities include:• Liaison between Internal Audit, SOX team, CISO Risk Management and ESS management team and the respective audit point owners. • Provide active support and coordination during audit fieldwork. • Ensure all ESS audit and SOX deliverables meet the high quality standards to satisfy the internal and external compliance requirements. • Maintain proactive information exchange about audit, SOX and regulatory items amongst coordinator community and ESS management. • Ensure timely and transparent audit remediation reporting to all relevant partners. • Update and further enhance the ESS SharePoint platform (including creation of statistics and reports). • Oversee and manage Internal Risk Register project – documentation and reporting. • Manage recurring certification of organizational adherence to regional or global standards and regulations. • Support initiatives to enable IT infrastructure to proactively manage their audit and regulatory requirements.

Remote, Nc

Primary Responsibilities:Support the identification, measurement, and mitigation of material risks in the organizationSupport the implementation, governance, and improvement of the Manager’s Control Assessment (MCA) Program to include report development and assessment executionSupport the Archer GRC implementation and administration of all Operational Risk activitiesSupport various business projects to address specific risk issues, working with business leaders and functional partners to analyze and quantify risks, assess solutions or mitigation activities, and develop remediation plansPromote a culture of risk awareness and accountability through training, education, and risk management consultative supportEmploy analytical skills and industry/functional knowledge to propose innovative solutions and validate feasibility of approachesCreate and deliver communications for various levels of stakeholders, from team member to senior executiveFormulate and incorporate successes and lessons learned into best practices in the support of risk policies, procedure and methodologies

Durham, North Carolina

Assist in planning, developing, and executing internal control audits and risk assessments to support the implementation and continuous monitoring of IT Controls. Audits are based off the NIST 800-53 framework. Responsible for identifying areas of opportunity for increase in process and control efficiencies and making change recommendations to management.

Cary, North Carolina

• Execute strategy, support and maintain IT security policy program including policy lifecycle process• Serve as the IT Security Policy program owner, including all planning and execution related program activities• Coordinate all development, changes, and recertification of global IT security policies, standards, and procedures• Assist with implementation of security compliance initiatives and security awareness programs• Support management in the enforcement of security policies, standards and procedures• Coordinate compliance initiatives with IT Risk & Security, Application Development, Engineering, Architecture and Business Units• Identify and evaluate business and technology risks, internal controls which mitigate risks, and related opportunities for internal control improvement• Assist in the risk evaluations of service providers arrangements in support of security policy and awareness programs• Support Global IT Security awareness and governance project management activities• Possess knowledge of eGRC framework design and development• Assist with IT security metrics reporting activities and audit issue tracking• Prepare status reports to develop security risk analysis scenarios and response procedures

Rtp, Nc

• Communicate corporate-wide strategy, direction, policies and standards on information security • Communicate initiatives, status and policy violations to management• Partner with management to investigate, report and/or resolve information security issues• Help develop, manage, implement, update and maintain information awareness campaigns and event-driven training programs• Assist with bi-annual SP2I workspace audits – Involves map preparation, audit participation, document preparation, processing and tracking, issue resolution, etc.• Maintain Security Programs metrics utilizing enterprise and TRM reporting systems

Rtp, Nc

• Communicate corporate-wide strategy, direction, policies and standards on information security • Communicate initiatives, status and policy violations to management• Partner with management to investigate, report and/or resolve information security issues• Help develop, manage, implement, update and maintain information awareness campaigns and event-driven training programs• Assist with bi-annual SP2I workspace audits – Involves map preparation, audit participation, document preparation, processing and tracking, issue resolution, etc.• Maintain Security Programs metrics utilizing enterprise and TRM reporting systems

Rtp, Nc

• Provide extraordinary customer service to internal and external customers with client specific knowledge, proactive education and trend analysis • Processing transactions requested by customers according to plan rules by navigating and correctly operating the relevant systems (such as BWS, XTRAC, CCW, HOBS, DBCS, ORACLE AR, Pretender, HiNet, eWorkplace, etc.)• Effectively analyze, process and solve complex HOBS procedures in a precise and quick manner to ensure qualifying results for customers and allowing additional time for other issues• Responding to customer questions/requests accurately and promptly either by phone or by written communications while resolving XTRAC work items or data problems and redirecting or escalating them as necessary• Work overtime as needed based on volumes

Bachelor Of Science (B.S.), Business Administration And Management, General

Education record