Samantha Munson Email & Phone Number

Chicago, Il, Us

Chicago, Illinois, United States

Chicago, Illinois, United States

• Lead team to deploy, operationalize and manage compliance program to meet the requirements of ISO, NIST, HIPAA, GDPR. • Achieve and maintain ISO 27001 and HITRUST certifications and maintain SOC 2 reports • Create, update, and socialize policies and procedures with appropriate audiences• Identify, Analyze, Evaluate, Treat and Review risk to ensure all risks fall within accepted, defined organizational risk appetite• Prepare, execute and monitor training • Document, test and improve Incident Response processes to ensure rapid, organized response• Evaluate, monitor, approve and track third party service providers to ensure appropriate Vendor Management risk management practices are applied • Identify opportunities to align IT initiatives with strategic business goals from a GRC perspective to ensure continuous improvement and rightsizing GRC program in the face of organizational, industry and benchmark evolution.

Chicago, Illinois, United States

• Create Privacy Program ensuring compliance with multiple regulatory Privacy frameworks, inclusive of GDPR and CCPA, to ensure the confidentiality of data and conformance with requirements addressing personally identifiable information• Maintain certification against ISO 27001 Information Security Standard, HITRUST and organizational SOC controls• Monitor progress of Security and Privacy legislation ensuring the timely and effective analysis of compliance requirements and executing procedures to ensure compliance• Implement new policies and procedures, ensuring the creation of an audit trail and appropriate internal audit steps ensuring efficacy• Ensure the creation and capture of audit trails for controls to ensure seamless performance of internal and external audits• Prioritize, map and organize the compliance program to ensure all internal and external processes are scheduled, organized, and executed• Manage risk process, ensuring risk scoring is accurately reflected and understood by stakeholders and updates for risks are made in a timely manner• Determine security/privacy controls that may be impacted by organizational changes and work with subject matter experts on addressing gaps

Chicago, Illinois

• Coordinate internal and external audits with 500+ controls against the HITRUST Common Security Framework (CSF) achieving HITRUST certification• Achieve certification against ISO 27001 Information Security Standard• Coordinate with internal and external resources to ensure the successful performance of SOC audits, and annual issuance of SOC reports• Work with subject matter experts to determine, document and implement security and privacy policies and procedures• Coalesce current processes to ensure they adequately comply with controls from multiple security frameworks• Monitor industry trends to ensure that next generation security and privacy practices are considered against the controls to which the organization is beholden• Perform internal audit tasks, ensuring day-to-day security and privacy activities adhere to contractual, regulatory and applicable framework requirements• Manage compliance aspects of security response/management to suspected security incidents• Lead Computer Security Incident Response Tests ensuring all parties are able to swiftly execute required response tasks• Create and manage Corrective and Preventive Action plans, resolving identified issues and ensuring continuous improvement of existing procedures• Lead new hire IT and Security orientation class to ensure the organization’s workforce is well versed in Security Policies and Procedures• Maintain Data Loss Prevention review process to ensure critical information does not leave internal network• Conduct Internal Risk Audit, ensuring controls designed to eliminate or mitigate risk are appropriate and effective. • Lead Internal HIPAA Audit, ensuring that the organization adheres to HIPAA Security, Privacy and Breach Notification requirements

Greater Chicago Area

• Determine long term strategy for Governance, Risk and Compliance utilizing organization goals, industry trends and current policies and procedures to create benchmarks for team activities• Direct and train junior employees; balance workloads, assign tasks, review output and provide performance feedback • Provide vital security and risk information in discussions regarding the evaluation/update of processes; speak to requirements outlined in standards, regulations and laws to which the organization is beholden• Coordinate internal and external parties in the execution of certification audits, client audits and internal assessments• Conduct assessments against ISO 27001, 22301, HIPAA, FAR and GDPR requirements on multiple practices; interview subject matter experts, review evidence against internal policies and external security requirements and standards, create assessment reports, and present findings to key stakeholders • Manage Risk by collecting and analyzing information provided by process/asset owners, present risk findings to resources at all levels of the organization, provide risk mitigation options, execute against selected remediation plans• Review and provide guidance regarding proper actions to be taken to mitigate risk presented by security incidents

Greater Chicago Area

• Create assessment frameworks for HIPAA, ISO 27001, ISO 22301, Federal Acquisitions Regulations (FAR), General Data Protection Regulation (GDPR) and other regulatory/security requirements• Conduct assessments on multiple practices; interview subject matter experts, review evidence against internal policies and external security requirements and frameworks, create assessment reports, and present findings to key stakeholders • Act as team lead, providing guidance to junior employees regarding internal Information Security practices, balancing workloads and assigning tasks based on resource availability and expertise, ensuring timely delivery of projects/tasks based on business need, and providing performance evaluation information for junior employees• Plan and execute annual Disaster Recovery test ensuring that key milestones are established, testing is kept on track/on time, and results are documented and analyzed for process improvements• Coordinate external certification and client audits, provide requested evidence, identify subject matter experts for inclusion in audit meetings, speak to internal policies and controls during audit meetings and organize management responses for findings generated.

Greater Chicago Area

• Design and execute internal compliance assessments for a variety of regulatory and external certification requirements• Present assessment findings to stakeholders at all levels of the organization• Organize remediation efforts and work with key personnel to establish remediation approach, identifying timelines, tracking remediation tasks, and reporting progress to external auditors, and internal stakeholders• Create and maintain policies and procedures to comply with regulatory and internal requirements

* Work with subject matter experts to identify and create business requirements/specifications for use by development resources in the creation of new products/product enhancements* Coordinate meetings with resources to identify process improvement opportunities to streamline existing workflows and create new processes * Design and create user documentation regarding proprietary tools for publishing online products* Troubleshoot and fix high-level data and display problems in online electronic publications* Direct efforts to update environmental files and ensure delivery of high profile legislative content to customers in a 24 hour timeframe* Organize and implement processes to create and launch annual archives of major online products* Create documentation and training materials for electronic production tasks

* Manage teams of up to 15+ resources to conduct the annual revision review project for high visibility/high value online publication* Troubleshoot and remedy data and display problems in online electronic publications* Maintain content in the content management system * Complete production maintenance and enhancement projects within deadlines* Process and review weekly/monthly/as needed internet images