Star Moran, Email & Phone Number

Westborough, Ma, Us

Seattle, Wa, Us

In a highly regulated field, I oversee the orchestration of FDA approval and compliance-related efforts for the pre-market development of a new medical device. InfoSec certification and release requirements are critical, and I ensure alignment with them for this effort. I regularly collaborate with development, marketing, privacy, and legal teams to further ensure regulatory, legal, and cybersecurity requirements across all aspects of device development. During this effort, I lead adherence to security and privacy element to align with the new SCOTUS ruling for developing and deploying this highly sensitive medical device.

Seattle, Wa, Us

While at Amazon as the Global Lead, of CTPS Compliance & Privacy, I was responsible for leading the planning, organization, and implementation of network security and data protection governance programs. This work required highly detailed development as well as the socialization of the requirements for 3rd party vendors, acquisitions, and in-house seller support personnel. Requirements had to align with Amazon CDO requirements. Oversaw Cybersecurity operations, ADHOC risks, and key business initiatives, involving a multi-layered communication strategy. To foster a robust compliance program, I initiated a Quarterly Network Architecture Board to validate the compliance of external entities to regulatory and corporate standards. In this role, I increased reporting of new and emerging risks by reinforcing corporate guidelines through the strategic roll-out of an internal security awareness education program for over 3000 agents. I orchestrated the creation of a Cybersecurity dashboard to inform leadership on key domain metrics, vulnerability and patch management, incident response, and overall security posture of in-house networks M&A initiatives, and third-party vendors. As a result of my leadership, leaders were able to make informed decisions and agents were able to identify and help reduce threats more readily.

Atlanta, Ga, Us

At INCOMM, I was responsible for the implementation and enforcement of the regulatory requirement and corporate policy adherence. I served in a consultative role, where I collaborated with Business, IT, Legal, HR, and Finance. Together, we worked to align organizational legal, privacy, and compliance strategies. Through my leadership and development of a team of compliance and privacy professionals, I orchestrated company-wide compliance with PCI, SSAE, HIPPA, HiTrust, GDPR, and CCPA across 42 global locations. We were able to accelerate the maturation of key regulatory and corporate compliance programs through a strong partnership I built with IT. We improved processes and increased efficiencies by automating areas essential to GDPR and CCPA compliance, including data mapping, records of processing, and privacy impact assessments through the implementation of OneTrust Privacy Management software. Standardization of governance, compliance, and privacy efforts for M&A initiatives was made possible through my work to harmonize the requirements and stabilize the pre-merger review process.

Atlanta, Ga, Us

As Director of Enterprise Compliance, I built and mobilized a team of program and project managers and analysts for PCI, SSAE, HIPIPA, and HiTrust compliance for 12 entities (corporate and associated subsidiaries), covering offices, data centers, warehouses, and call centers in US, Canada, UK, Puerto Rico, and Japan. We monitored legislation, guidelines, and regulations that allowed us to anticipate organizational impact and provide responses that aligned with the enterprise’s risk appetite as well as executive strategic goals. As part of our monitoring, we ensured alignment with NIST, COBIT, and ISO frameworks. I led the deployment of the first-ever enterprise-wide Policy Management Office to oversee the policy management lifecycle. Our team automated the review process through Service Now GRC module integration. The collaboration I fostered with the CIO and IT leadership allowed for continual compliance posture monitoring, definition, and refinement of compensating controls. This collaboration led to our overhaul of the vulnerability management program through consolidated efforts with infrastructure, networking, and various other IT departments. As a means of education globally, I led the development and launching of the first-ever Security Awareness Month, delivering relevant and engaging activities and information to 42 global locations.

Atlanta, Ga, Us

As an InfoSec Manager, I quickly stabilized the infrastructure through program planning, organization, and daily management of initiatives. I led the close monitoring of approval of production changes for rollback and contingency plans. I orchestrated the development of a full-scale remediation plan for processes requiring enhanced security controls. The Physical Security protocol for corporate and data center locations was revamped under my leadership. My strategic leadership and tactical acumen were recognized, and I was promoted to Director of Enterprise Compliance within the first 45 days with the organization.

Atlanta, Ga, Us

Bellevue, Wa, Us

Amsterdam Zuidoost, Nl

Mba, Business Administration; International Management

B.A, Business Administration; Marketing

Bachelor Of Arts - Ba