Joseph Schwab Email & Phone Number

New York, Ny, Us

New York, Us

Remote First, Us

Gb

Fortune 500 Pharmaceuticals Client○ Manage a team of 5 assessors in conducting Cyber, Privacy and Resilience due diligence reviews of the client’s global vendorpopulation ensuring that the annual assessment targets are met with the highest quality deliverables○ Assist the client through their annual internal audits by leading discussions with auditors and providing accurate samples uponrequest○ Develop the reverse TPRM framework for the client and help implement the Loopio solution to streamline the response processfor external cyber due diligence requests○ Develop tracking mechanisms for both due diligence assessment work and issue management with KPI dashboards thatprovide the client with insightful and actionable metrics○ The dashboards lead to the expansion of the scope of the project and commission the development of Tableau dashboards forthe client's executive leadership team○ Lead a team of data 2 analysts to develop multiple Tableau Dashboards for the various work streams that were in scope of theCyber and eTPRM programs○ Lead weekly status calls with the client’s senior leadership teams on various cyber work streams that PwC is engaged in toensure that the program is on track and all RAID items are addressed in a timely manner by the appropriate stakeholders○ Assess all the vendors in scope of the client’s new service offering to ensure GDPR compliance in preparation of the EUproduct launch○ Manage the end to end remediation process of all issues identified during the cyber due diligence reviews

Gb

Fortune 500 Consumer Packaged Goods Client○ Manage a team of 3 assessors in performing the Cyber, Privacy, and Resilience due diligence assessments of the clientsglobal third parties in accordance with their defined methodology○ Provide continuous feedback to the assessment team to ensure ongoing upskilling to reduce turnaround time of assessmentsand improve the client’s SLAs○ Provide weekly status updates on the program to the client’s leadership to ensure efficient project and resource management○ Manage the project financials ensuring accurate invoicing and that the project remains the contracted budgetInternal Covid Triage Project○ Develop a scoping questionnaire and rating methodology to provide guidance to the Business Continuity and Disaster RecoveryLeads on which critical vendors required follow up to reduce the resiliency risks posed by the COVID-19 pandemicManage the Risk Atlas Solution content development team and partner with the application development team to create a global regulationmapping tool designed to provide clients with insight into the potential control gaps when adopting new regulations

Chiyoda-Ku, Tokyo, Jp

- Continued to perform all tasks from previous role along with; Conducting Onsite Risk Assessments of the Bank’s critical vendors- EIS (Enterprise Information Security) lead for contract reviews, partnered with the legal and sourcing departments to review redlines and negotiate vendor agreements to ensure the appropriate security clauses are in place to mitigate risk and liability to the Bank- Revamped the information security terms and conditions exhibit within the bank’s vendor MSA template to better align the minimum security requirements to the changing Cyber Security landscape, industry best practices, the bank’s control environment, and regulations such as PCI, GLBA, and HIPPA- Developed an Information Security Services Matrix Tool that determined the applicable information security terms and conditions for each type of service vendors may provide, that was incorporated into the legal and sourcing playbooks to help streamline the redline review process and offered fallback concessions based on the vendor risk level- Automated the vendor scoping questionnaire to streamline the planning process of the risk assessments- EIS lead for the bank’s standard response package, developed the core set of security control responses and the due diligence evidence that the bank provides it customers during due diligence inquiries and acted as the Information Security liaison for the bank’s clients

Chiyoda-Ku, Tokyo, Jp

-Assisted legal and sourcing departments with the contract review process, by providing Information Security Expertise to aid the drafting and negotiation process of MSA’s, SOWs and applicable addendums.-Maintained and monitored due diligence tasks for third-party vendors -Conducted information Security risk assessments on new vendors along with continuous monitoring of existing vendors by reviewing due diligence packages and determining the risk posture based on the EIS risk methodology-Identified, interpreted, and mitigated critical risk factors in a timely manner-Assisted a variety of lines of business with the selection process of new vendors , continuation of services and the vendor life cycle process-Provided status reports on vendors’ security postures to management, auditors, regulators , business unit risk managers and officers

Chiyoda-Ku, Tokyo, Jp

-Continued to carry out all tasks that were conducted as an intern-Created a KPI dashboard to analyze the results of all QA assessments to track the metrics of individual EIS Risk SMEs-Analysis of KPIs lead to key process enhancements through identifying deficiencies-Provided weekly insight to senior management of the SMEs performance

Chiyoda-Ku, Tokyo, Jp

-Conducted QA reviews on SME Risk Assessments of the bank’s vendors-Coordinated and scheduled reviews with all applicable stakeholders (Third Party Managers, Business Risk Managers, Vendors, other SME groups, etc.)

Us

•Enrolled in a summer internship program in the Domestic Violence Unit at the Kings County D.A.'s office•Performed tasks such as but not limited to creating subpoenas, filling out case files, and contacting witnesses, victims etc.•Maximized filing and delivery of case files to prosecutors and court house officals