Experience

Early Warning®

• United States
• Financial Services
• 700 & Above Employee

• Security Governance and Compliance

  • Jul 2023 - Present



nt

• Tempe, Arizona

• VP Information Security Administration

  • Sep 2016 - May 2023

  • Lead a 2nd Line Risk Team where I managed and oversaw the Annual Risk Assessment, and periodic Control Testing for the Technology Organization. I would also review and update the Technology Risk Library. Additionally, I mapped all Technology Controls from the Technology Risks through to the Operational Risks Library to produce Corporate Risk Assessment Data and Reporting that provided Executives with drill down capable reports for Board level decisions • I created multi-point Risk Appetite Board Reports for assessing the Technology Organizations overall Risk Appetite. To do this, I assessed each Control and tied together Audit Reporting, Regulatory Requirements, and Control testing ratings from current and past years. These were combined and used to calculate a Residual Risk Rating Impact. The results for each Control were combined with other Key and non-Key Controls assessing the impact from all of Controls mapped to the same Risk. I based the Residual Risk Ratings for Technology on this broad view of the Controls and their assessed effectiveness from multiple groups, to advise which Controls would need to be reviewed and adjusted to make targeted improvements and reduce the overall Risk Appetite as a summarized and quantifiable report • Implemented appropriate Risk Controls ensuring ongoing Compliance with applicable Financial Regulations and Industry Standards, such as FFIEC and NIST • As the Manager of the Global Access Provisioning Team, I lead the team that created and removed system access for the organization with 25,000 employees/contractors across more than 250 applications on multiple platforms (Cloud, Mainframe, and Windows) • Revised Provisioning Procedures for 250 different applications in my portfolio, some of which had not been updated in years or following major application version changes • Managed the Budget / Work Assignments for a team of 32 including; scheduling, training Show less



American Express

• United States
• Financial Services
• 700 & Above Employee

• IT Risk & Information Security Manager

  • Oct 2010 - Sep 2016

  As a Manager within the Risk Organization I am responsible for supporting Technology teams with Operational Risk Assessments and meeting compliance requirements within the American Express Technology Organization. I meet with teams and identify Risks relevant to their unique processes, assist them with outlining compensating controls to mitigate those risks, and create testing plans within the Technology groups to ensure Controls are operating effectively at American Express.

• Senior IT Risk & Information Security Analyst

  • Mar 2008 - Oct 2010

  I was part of the team to implement an Enterprise DLP program internationally in a fortune 100 company. I also managed the review of CSA and Proxy logs within this corporation for weekly and monthly acceptable use policy violations. Within this team I was also part of the team that created a vulnerability scanning program for servers on the corporate network. Vulnerability scanning, reporting and remediation were the focus of the program we created and use today.

• Staff Technology Auditor

  • Oct 2006 - Mar 2008

  I was a staff technology auditor that performed application audit reviews of the applications that run the American Express enterprise systems, I also performed infrastructure audits.



Costco Wholesale Inc

• Cashier and forklift operator

  • Sep 2003 - Oct 2006

  I worked at this position part time while in Phoenix, I took a four year leave of absence for active duty military service while stationed abroad. After leaving the military I returned to Phoenix and Costco offered me my position again. I worked there part time at night while attending ASU during the day. I worked at this position part time while in Phoenix, I took a four year leave of absence for active duty military service while stationed abroad. After leaving the military I returned to Phoenix and Costco offered me my position again. I worked there part time at night while attending ASU during the day.



Marine Corps Recruiting

• Armed Forces
• 700 & Above Employee

• Communication Chief

  • Aug 1994 - Aug 2003

  I was a Staff Sergeant responsible for the implementation and maintenance of entire Communications Systems which provided strategic Internet, Phone, Radio, and Satellite Communications to more then 2000 users. I was responsibility for the accountability, operation, and maintenance of multi million dollars of equipment. In addition I was responsible for more than 12 direct reports who I supervised, created work schedules for, trained, and created written evaluations of their performance. I was also responsible for the education, and training of junior level managers responsible for up to 4 direct reports of their own. I enjoyed this position and the time I spent in the Marines as a life experience. I was able to develop talents in a variety of different fields that most Jobs do not offer. Show less

• Staff Sergeant

  • Jan 1999 - Jan 2003

  Communications (voice, data, battlefield logistics) Section Chief, responsible for classified material and equipment. Served in Operation Enduring Freedom (Afghanistan), multiple meritorious decorations, Honorably Discharged.