Recruited to mature and build PayPal’s Control Lifecycle Management program including Issues Management and Control Testing. Leveraged agile program leadership and big data industry expertise to implement rapid identification and remediation of issues. Led firm-wide Cybersecurity Control Testing, streamlined, and modernized the evidence gathering, testing, and reporting of control testing for status transparency.

Promoted to build and lead a new Insider Threat program that spanned multiple business units: Legal, HR, Operations, Risk Management, Financial Crimes, and executive leadership. Beyond incident response to insider threats, the program was built to enhance the maturity of firm-wide controls through in-depth post-incident gap analysis. Built a scoring model to detect potential insider activity using multiple data sources to streamline investigations, including Data Loss Prevention (DLP), SIEM, and Network Controls.In addition, I resumed leading the enterprise vulnerability management program while also expanding the reporting scope to provide real time dashboards and executive reporting for all cybersecurity controls. Leveraged existing BI tools, data sources, and automation; including Robot Processing Automation to build state of the art Executive Dashboards. An instrumental member of the Executive Risk Forum, a formal group of executives from over 12 technology organizations, and C-Suite leaders to review issues, KRIs, and control deficiencies.

I was promoted to lead the enterprise vulnerability management program focusing on both infrastructure and application vulnerabilities. Led multiple major initiatives and proof of concept (POC) projects to build and enhance vulnerability scanning operations. Led the planning and development of a database and reporting mechanism to provide real time reporting to support staff and company executives.

I planned, architected, and implemented the firm’s first automated tool to alert on technology incidents.