Pam Morgan Email and Phone Number

Vice President of Information Security Vendor Risk Management – ManagerState Street Corporation 2018 - 2019• Reporting directly to the Deputy CISO, managed global team of information security subject matter experts. • Align State Street’s Third Party Risk Management Program with current regulatory requirements and risk based reviews including new engagements and ongoing monitoring of existing providers. • Member of the information security leadership team under the Deputy CIS and senior advisor in critical transformations and merger & acquisition activities. • Senior information security negotiator for security schedule contract addendums and terms with key, critical providers.Vice President of Information Security Vendor Risk Management – Program Mgr. and Sr. Technical LeadState Street Corporation 2015 - Apr 18 • Led the design and development of enhanced third party risk program to move from manual, US-centric model to automated Global model incorporating GRC tool development and design.• Primary resource within Corporate Information Security to negotiate Security Schedules with all service providers holding State Street Data. • Established virtual, cross-discipline team to move decentralized Due Diligence process into a centralized model in order to establish oversight, compliance and legal review, as well as quality control. Requirements for State Street and vendors using public and private cloud configurations were developed, documented, added to internal controls manual, security schedules and due diligence assessments.• Conducted compliance and security assessments of various network components of the global infrastructure identifying gaps to regulatory and compliance requirements relative to ISO 27001/27002, NIST 800-53, FFIEC, Cloud Security Alliance (CSA) and others.