Sarah Sension, Cissp Email & Phone Number

Saint Paul, Mn, Us

Minneapolis, Minnesota, Us

· Implemented, and maintains Jostens Security Awareness Training Program, as well as continuous phishing simulations and remedial training· Assisting in the development of an enterprise wide Information Security Standards project, focused on PCI-DDS and ISO 27000 control guidance· Interprets controls and guides IT teams in collecting and uploading objective evidence for external audit reviews· Use of Jira, Kanban boards and Confluence for task planning, reporting, and documentation· Creating an enterprise wide Third Party Risk Management program by working with departments across the organization in order to establish a comprehensive risk management program· Provides robust metric reporting on the Information Security Program to executive management on a monthly basis

Minneapolis, Minnesota, Us

• Created, implemented, and maintained all procedural and process documents outlining the organization's Information Security Program • Continuously engaged with internal and external audit teams on risk reporting and testing of IT controls • Demonstrated a strong understanding of various compliance and regulatory areas (eg. NIST, HIPAA) as well as risk exposure and risk reporting • Supported the creation and maintenance of all security awareness training modules as well as continuous deployment of phishing simulation emails • Developed and maintained a vendor risk management process to monitor and provide identity access management for the organization's external partners • Facilitated the creation of a Business Continuity and a Disaster Recovery plan for the organization • Managed security operations across a variety of platforms including Microsoft Sentinel, CyberArk, ProofPoint, and Varonis • Provided continuous reporting metrics to management on vulnerability and penetration testing remediation

• Conducted risk analyses of vendor key performance indicators and made recommendations to management based on the findings• Developed and presented PowerPoint decks for executive management on vendor related issues• Supported and managed the accuracy of vendor records and updates in the Enterprise Risk Management System – Archer• Collaborated with subject matter experts in Information Security, Compliance, and Business Continuity/Disaster Recovery to determine the risks associated with new and current vendors• Worked closely with business units across the organization to develop stronger guidelines for vendor standards and relationships

• Maintained a strong relationship with vendors on escrow accounts and Ditech procedures• Created and maintained procedures for all escrow tax related functions• Provided monthly quality checks on vendors to management• Assisted in training new and existing staff on escrow systems and procedures

Us

• Communicated with county representatives about changes in real estate rates and amounts• Researched legal discrepancies within recorded mortgages • Performed yearly analyses on all escrow accounts