Performs annual and ongoing IT risk assessment audits for internal and external stakeholders. • Manages IT governance and SOX reporting to prepare for and respond to audits at all levels, including FDIC and internal/external audits. • Consults with vendors and completes annual risk assessments, resolving exceptions or issues defined in reports. Spearheads internal education and awareness campaigns, leveraging subject expertise to create training. • Continually improves efficiency, consistency, and transparency by mapping controls and processes to align with bank programs and committing to regular review. • Manages MSOC and patch management third party solution, including threat intelligence and incident management/alerting/reporting.• Directs Business Continuity Planning and Disaster Recovery (BCP/DR) activities.• Administers FFIEC Cybersecurity compliance, mapping NIST standards to Self-Assessment tool (CAT).• Developed educational materials for the Cybersecurity and Information Security (CIS) board.

Performed vulnerability assessments and Penetration tests on network and applications using industry standard tools such as IBM Rational Appscan, Nessus, and Metasploit, and remediation testing. (Managed third-party vendor testing of same.)• Augmented application testing in overall application security framework of static and dynamic scanning in SDLC.

Part of Corporate Technology and Operations Network teams to develop and implement IT Risk Assessments solutions and standards. Managed externally facing application projects to exceed standards and ensure compliance. • Collaborated with global technology teams on security architecture and placement of security controls. • Developed solutions for risk mitigation in non-compliant systems and defined documentation required for exceptions.