Shane Tierney Email & Phone Number

San Diego, Ca, Us

My role as Sr. Program Manager, GRC is a critical role in Drata’s R&D and product innovation efforts. I support and build the continuous enhancement of the ideas and processes that help the product scale effortlessly and efficiently across different GRC domains, security standards and privacy regulations, with the underlying goal of a seamless user experience. I conduct in-depth evaluation of complex issues with variable factors, and evaluate issues from multiple diverse perspectives to propose and develop creative and effective solutions with different levels of impact.Responsibilities:• Manage and develop programs with the GRC Office within the Product Department.• Serve as a subject matter expert on one or more of the governance, risk management, and compliance domains, as applicable to the product, and regularly advise others on complex matters.• Develop creative solutions to meet customer needs faster and more effectively.• Be a key driver in product planning and development, and the development process.• Regularly collaborate with members of Product, Engineering, Customer Success, Sales, and Marketing, and be able to use your powers of persuasion to appropriately deliver messaging.• Collaborate and hold a network of contacts outside of your own area of expertise.• Educate, train, and enable other teams in an area of expertise.• Develop knowledge databases for scalability.

San Mateo, Ca, Us

Sole person in the company tasked with being the point person for InfoSec, data governance, risk & compliance, including legal operations, data privacy, and executing audits to ensure compliance with all regulations. Continually streamline operations by providing automation using technology and training to other departments such as ENG, DS, Sales, Marketing and CS. • Lead the SOC2, Penetration Testing and Google OAV annual renewal process with outside auditors.• Setup an Information Security & Privacy Portal for company site; answer incoming Client InfoSec questionnaires (CAIQ, VSA, SIG, SIG Lite, Etc.).• Work with sales to provide legal redlines for bespoke Terms & Conditions or Data Processing Agreements.• Enhanced existing and created new InfoSec and privacy related policies, procedures, standards & supporting documents into a singular InfoSec Handbook of 31,000 words for staff and clients.• Continually manage and improve the 3rd party vendor risk management (VRM) information technology risk management (ITRM) programs, inclusive of privacy impact assessments (PIAs).• Created and continually manage the procurement program in conjunction with Finance, provide legal and InfoSec due diligence on any vendors submitted for consideration.• Collaborate with teams to establish self-assessment processes and controls and ensure they are being completed.• Provide InfoSec Onboarding Training to all new SetSail employees upon start date, and run a continual InfoSec and Data Privacy training program to keep employees aware of new risks or changes.• Started a Privacy Maturity Roadmap Plan that expedited the operational progression of organizational data governance, privacy, and data protection polices by establishing SetSail’s DPO, Privacy Champions Team, and regular reviews in January 2022.

San Mateo, Ca, Us

Responsibilities:• Lead the SOC 2 renewal process with outside auditors• Work with the pre-sales security assessment process• Create and enhance information security policy• Manage the 3rd party vendor assessment program• Collaborate with teams to establish self-assessment processes and controls and ensure they are being completed

Chicago, Illinois, Us

Singular Manager of a data privacy, governance, and protection program, executing audits to ensure compliance with all regulations. Drive drafting, redlining, and negotiation function for 50+ Data Protection Agreements with vendors and customers.Key achievements:• Advanced security governance structures, strategies, and directives in alignment with organizational goals. • Key communications interface with the Sales & Marketing team that defined collected Categories of PI, the sharing of collected PI, and the utilization of the company social media platforms and cookie types that ensured full compliance with new legislation and regulations.• Introduced a Global Privacy Maturity Matrix and Roadmap Plan that expedited the operational progression of organizational data governance, privacy, and data protection polices based on templates and guidance from IAPP, ICO, EDPB, IAB, ACC, OneTrust, Veronis, BigID, TrustArc, CLOC, and ITLA.• Redesigned the privacy policy to expand the volume of text by 500%, implemented language to include terms for GDPR, CCPA, APEC, CBPR, PRP, LGPD, CanSPAM, COPPA, Privacy Shield (post Schrems II), CalOPPA, and California's "Shine the Light" law.• Designed a cross-functional program that continually monitors changes to privacy laws and regulations.

New York, Ny, Us

Key corporate contact in business areas including ad ops, social, privacy, insurance, client MSA compliance, data, and ad tech platforms, such as DMPs, SSPs, DSPs, and other third parties, including major brands and clients. Key achievements:• Communications interface across Legal, Engineering, Ad Operations, and ancillary departments that established accurate implementation of automated tools and SaaS technology.• Spearheaded a multifunctional Communications Leadership group for GDPR and a Data Privacy & Security Networking team that introduced technology solutions that maximized efficiency; adopted initiatives improved flexibility and team agility while addressing operational gaps.• Led a cross-departmental task force in creating strategies that supported changes from shifting privacy laws.• Partnered with 25 Attorneys across a wide scope of specializations to develop a compliance and data governance program while ensuring compliance with changing data legal requirements.• Chaired various Privacy, Compliance, and Data Governance task forces to target business impacts from rapidly changing legislations, including a $2.3B acquisition of Acxiom and and Acxiom's data sharing partnership with General Motors and AC Delco, among others.• Key trainer to 165 Attorneys for the CIPP/E, CIPP/US and CIPM.

New York, Ny, Us

Provided executive-level consultation and support to the Contract Administration team for the Office of the General Counsel charged with negotiating and drafting 2,500 agreements per year. Key achievements:• Leveraged planning, organizing, guiding, and controlling skills to advance key training for Contract Originators on effective third-party risk management, contract negotiation, and policy compliance. • Headed the RFP and implementation of cloud-based policy and compliance software for all staff across the organization.• Project Manager for the implementation of contract administration, Policy & Compliance and Document Management systems, directly interfacing with OOP, COO, CFO, AP, and IT departments to ensure accuracy.• Directed the successful transition from a counsel review system to a system where 90% of contracts were drafted without attorney review, decreasing turnaround time by 87%.

New York, Ny, Us

Interpreted, analyzed, and recorded the data for programming, distribution, licensing, and talent related to legal contracts across all brands. Key achievements:• Interpreted 150+ complex legal agreements monthly, leveraging databases and ancillary systems to streamline the dissemination of crucial information to key stakeholders.• Implemented multiple databases and computer programs that optimized legal file management functions.• Designed impactful reports; reports were adopted for use in marketing and garnered an increase in revenue and delivered new business opportunities.

New York, Ny, Us

Created and coded detailed summaries of Digital Distribution contracts between Sony Music Entertainment's Global Digital Business team and digital service providers. Managed 400+ digital partners with a total digital income of $1.5B.Key achievements:• Harnessed knowledge to ensure summary data remained in compliance with SOX, FCPA, and Copyright, Artist Royalties, Global Digital Business, Finance, and Reporting department requirements. • Cross-collaborated with multiple IT and Development teams to drive process improvements that supported changes across revising, testing, and implementation of new database system builds employed by by Business and Legal Affairs, Global Digital Business, Finance, and Reporting.

Glendale, Ca, Us

Key Responsibilities:• An integral part of the legal team, communicated with teams to prepare, administer, track and process a wide variety of entertainment industry agreements, contracts and other legal documents, often on a global scale.• Designed, implemented, maintained, and continually maintained managerial oversight of digital data room encompassing all relevant business, legal, financial and corporate information.• Forecasted expiring licensees and distributed on a monthly basis to business groups and senior management.• Processed and tracked legal/administrative invoices.• Coordinated with Finance Department to ensure contractual payments.• Served as point-of-contact for Business and Legal Affairs in weekly IT meetings with CFO and CIO.Achievements:• Served as key point person for delivery and dissemination of all due diligence on potential corporate and intellectual property acquisitions.• Managed legal documents via department databases and hard files to convert information to a paperless system.• Drafted over 400 agreements, an increase of 800% over predecessor.• Instrumental in the $155 acquisition of Classic Media, LLC by DreamWorks Animation in July 2012.

Key Responsibilities:• Accountable for assisting 4 in-house attorneys, as well as outside counsel in all litigation matters for EMI Music, including affirmative claims, active lawsuits, anti-piracy, and copyright, as well as trademark infringement.• Methodically processed sound recording and audio-visual copyright applications for EMI.• Conducted research into trademark status and maintained a global trademark database for the company.• Researched, analyzed and documented intelligence for active lawsuits with LimeWire, Bluebeat, Grooveshark, MP3Tunes, Vimeo, and others.• Produced chain-of-title declarations, royalty and sales data, and internal communications for production.• Liaised with US Customs and Border Protection, IFPI, and RIAA concerning high-end counterfeit products, and the various remedies available both domestically and internationally.• Trained and mentored two paralegals, and eight interns in the proper procedures for the department, in addition to maintaining the protocols of anti-piracy lab.Achievements:• Created and maintained a litigation income tracking pipeline for all affirmative claims and digital deals, liaising with finance for overall income projections for department.• Was point person at EMI with Sound Exchange to ensure that unmatched data for digital sales was properly allocated to EMI for over 25,000 tracks.• Established a local digital database of artist contracts, copyright certificates, and other chain-of-title documents with over 85,000 documents scanned into EMI’s first digital document repository.• Tracked over 170 matters in litigation globally.

New York, Ny, Us

KEY ACCOMPLISHMENTS:✪ Researched viability & beta tested designs of new online classical music retail store, Ariama.✪ Assisted in the execution of updates on all Sony music websites to ensure their compliance with current Federal regulations.

Us

KEY ACCOMPLISHMENTS:✪ Created an innovative data merging strategy for new media.✪ Correlated licensing data with SoundScan data for Billboard Magazine.✪ Analyzed licensing for the top 52,000 songs of 2009.

KEY ACCOMPLISHMENTS:✪ Exposed to PR, marketing, promotions, production and A&R departments.✪ Projects included Press and Public Relations for LEMONHEADS new CD, "Varshons".