Cheryl Smith Email & Phone Number

Thousand Oaks, CA, US

Calabasas, CA, US

• Dual reporting to Chief Administration Officer and Corporate General Counsel to develop a company-wide risk management program and oversee risk reduction functions, which includes risk identification and evaluation.
• Develop and track corporate risk metrics. Review key performance indicators/metrics and assist management in the early identification of risk trends.
• Provide risk support for major initiatives as appropriate, including vendor management and large system/process improvements. Support includes due diligence work, assessment of project management, consulting on key.
• Ensure that the organization achieves and maintains compliant control structure for protection of regulated or company-sensitive data (PCI, PII, PHI, IP)
• Establish and maintain Enterprise Policy Management framework
• Hazardous Waste Management compliance

Calabasas, CA, US

• Responsible for IT Security Compliance and PCI (Payment Card Industry) annual assessment
• Development, communication and maintenance of Information Security policies, standards and operating procedures
• 3rd Party security assessment program
• Risk assessment and acknowledgement process
• Information Security Awareness training program
• Implemented a “branded” Information Security Program and Security PMO framework based on a formal 3-year strategy

Charitable organization providing emergency assistance to employees of Harbor Freight Tools and their families who require financial assistance due to a catastrophic event or a personal crisis.

Charlotte, NC, US

Directed the corporation’s global Information Security and IT Security Governance framework leveraging ISO17799, IT Governance Institute (ITGI), and CobIT methodologies to deliver balanced, cost-effective risk mitigation and regulatory compliance. The program focused on the definition of control objectives, identification and assessment of solutions.

Woburn, Massachusetts, US

Program Director responsible for monthly meeting itinerary and speakers, increasing membership and community outreach.

Committee Chair responsible for ISSA-LA annual symposium, featuring industry specialists and vendor exposition. The Symposium generated revenue used to fund scholarships in the security-education field.