Pam Hensley Email and Phone Number

I am responsible for the Information Security Program at AAA Life. I set strategic direction for the security safeguards employed to protect our member's, employee's and company confidential information. I am responsible for vulnerability scanning, application vulnerability assessments, and vendor assessments. Additionaly, I manages the security awareness program for all internal employees.

I am responsible for supporting the Banking and Business functions of Retail Finance by operationalizing security solutions, and leading a globally-based, highly skilled and diverse team of IT professionals that sets strategic direction for data loss prevention, boundary security solutions and vulnerability management. We defined security metrics to show risk reduction and measure our success. We grew and maintain the security awareness program for all internal employees. We integrate with all facets of IT operations and business to define and implement information protection solutions.

This global IT Security leadership role included developing a security roadmap for the corporation. Key success factors were gained through strategic partnerships with business teams, IT teams, legal, and audit. A senior leadership governance committee was established to enable my team to communicate opportunities and issues to business leaders and enable them to share strategic direction with my team. My team established a regulatory requirements baseline to develop and maintain a global IT compliance program.

I created a risk assessment program with repeatable processes to assess, remediate and maintain compliancy to HIPAA Security requirements. This role was a full-time consultant for the Information Security team. The goal was to assess current security program and defined gaps to the HIPAA security compliance requirements. The assessment included physical, technical and administrative safeguards. After the gaps were identified, I also defined remediation strategies including prioritization of solutions required. Finally, I developed repeatable practices to ensure on-going compliance would be maintained. During this time I also served as recording secretary for BCBS Association Information Security Advisory and Governance Committee.

This role evolved during my time with BCBSM from an individual performer to leadership role resulting in the creation of a security program, common and repeatable security practices and compliance the HIPAA Security and Privacy requirements. The program included establishing compliance with numerous legislative and business requirements including the Data Security Standards for the Payment Card Industry (credit card management requirements) and state-by-state privacy requirements. Defined a security risk methodology that integrated with the project management processes to ensure appropriate security solutions were defined and implemented as part of the project. Part of my success was based on establishing and maintaining effective relationships with compliance associates, legal representatives, audit professionals, IT leadership, and human resources to ensure projects were completed within timeframes and budgets. During this time I was one of the initiating team members that formed the Information Security Advisory and Governance Committee within the blues.