Ronald Lee Email & Phone Number

New York, Ny, Us

WeWork is a global flexible workspace provider that offers co-working spaces, office services, and community experiences to freelancers, startups, and large enterprises. Despite facing financial challenges and restructuring efforts, WeWork continues to adapt by focusing on its core business of flexible workspaces and aiming for profitability.My primary responsibility at WeWork is to revitalize the Information Security - Governance, Risk, and Compliance (GRC) function. This involves rebuilding the department's core foundations, establishing robust risk management principles, and achieving hiring targets to support the company's efforts in rebuilding and achieving long-term success.

New York, New York, Us

Primary is New York City’s premier early-stage venture firm working alongside founders to build unicorns like Alloy, Alma, Chief, Dandy Electric, Latch, K Health, Stellar Health, Slice, and many more.As an Expert, I provide strategic advice and guidance to the investment team and founders within the Primary portfolio and broader network.

New York, Ny, Us

Leadership role scaling and maturing our security program to support the growth of the company to over 400 headcount and Series B funding. Hired and developed high performing teams, established strong foundations and strategy, and delivered consistently on annual department objectives to continuously scale at the speed of the business.

New York, Ny, Us

Joined SevenRooms with 130+ employees, and Series A funding, as their Head of Security, Compliance and Risk responsible for building out security, compliance and IT from the ground up to support the company's growth. Responsibilities include: - Developed the department's strategy and long-term vision, setting core values and competencies for success - Created annual roadmaps, budgets, and headcount plans, and defined key metrics and KPIs to align with company priorities and focused resources on the most critical risks- Developed the organization's Information Security program including policies, procedures, security awareness training, cloud security controls, SLDC controls, corporate security controls, etc...- Led the company to achieve their first SOC 2 compliance report and completed annual PCI certifications- Provided strategic security and compliance guidance to leadership and the board on appropriate investment and maturity of program- Established a robust third party risk management program that incorporated legal, finance, security and IT requirements in one seamless workflow, effectively managing third/fourth party risks- Developed our data privacy framework to engage with EU/UK prospects and clients - Reviewed enterprise agreements to ensure security and operational commitments were captured and operating effectively

New York, Ny, Us

Joined Yext (pre-IPO) to build and lead their Governance Risk and Compliance (GRC) department with a primary focus on SOX, SOC2, PCI and HIPAA compliance and remediating issues in the filed S1. Reporting to the CIO in the Engineering organization, I joined when the company was 600+ people and built the team to support compliance activities as the company doubled to 1000+.Expanded responsibilities included;- Prepared and delivered updates to executive leadership and board members, advising them on SOX related decisions and providing concise updates on our compliance maturity- Developed an embedded GRC operating model to identify to changes within our platform, infrastructure and product that would impact our compliance responsibilities and provided real-time feedback- Led a special project to remediate potential errors in our public disclosures for key financial health metrics attributed to our business intelligence reporting - Collaborated with Internal Audit to provide IT audit capabilities and execute on specific IA plans

New York, Ny, Us

Responsibilities included;- Built GRC audit frameworks, templates, systems and processes to introduce and manage risk at Yext from leadership down to individual contributors- Established and enforced accountability over risk management and introducing 3 Lines of Defense model to leadership and board- Developed department's charter, budget, headcount planning, hiring, goal setting and annual roadmaps to build the team to five direct reports- Built a trusted brand for the GRC team as a partner and trusted advisor to the organization at all levels- Implemented and managed our GRC program into our SOX tool AuditBoard enabling control and risk owners to manage their responsibilities centrally- Promoted a transparent and positive team culture that focused on doing great work, having impact, celebrating wins, and real-time honest feedback

Gb

Responsible for leading multiple engagement teams to plan, execute and manage the delivery of PCAOB and AICPA audit engagements. Consulted for global financial institutions including insurance and banking clients, providing risk management and controls expertise over technology and business processes.- Developed accurate budget and planning templates for engagement economics- Directed teams in executing audit plans, ensuring timely delivery of high-quality results within budget constraints- Collaborated with international teams across various functions to minimize audit strain and boost project efficiency- Guided and developed the skills of team members, fostering their professional growth and advancement within the firm- Delivered presentations to executives and board members, offering insights and updates on audit findings and recommendations

London, Gb

IT Risk advisory and assurance experience in Financial Services, Utilities and Government sectors. This includes the following. Responsible for managing and executing on a wide range of audit and consulting engagements for large public companies listed on the Australian Stock Exchange (ASX) focused primarily on:- Identity and Access Management- Change Management and SDLC- IT Operations (Backups and Recovery, Incident Response, SLAs)- Application Controls and IPE- Risk assessments (i.e., Operational, Enterprise, and Technology Risk)- Regulatory financial reporting (i.e., ASIC)- Third party reporting- Development of IT controls framework using industry standards (CobIT, ISO, ITIL, NIST)- IT control effectiveness reviews- Gap and maturity assessments (ISO, SOC2/ASAE 3150, PCI DSS)