Looking for a job

Jacqueline Henson

@jacquelinehenson

Technology risk manager at Capital One who launched a Gemini solution that cut assessment analysis time by approximately 3 hours.

United States

Message

At Capital One, I designed, tested, and launched an AI-powered Gemini solution adopted by 6 assessors, reducing manual analysis by approximately 3 hours per assessment while maintaining human oversight. I also developed a cybersecurity risk-scoring methodology adopted across approximately 180 technology assessments and 8 authentication platforms.

I lead technology risk assessments and manage findings through remediation at Capital One. Previously, I automated portions of control testing with SQL at Deloitte & Touche LLP, reducing testing time by 50%, and worked in cybersecurity audit, incident response, and systems analysis. My certifications include CISA, AWS Certified Cloud Practitioner, and CompTIA Security+.

Experience

Work history, roles, and key accomplishments

Current

Principal Associate, Technology Risk Management

Current

Capital One

Mar 2020 - Present (6 years 7 months)

Designed, tested, and launched an AI-powered Gemini solution adopted by 6 assessors, reducing manual analysis by approximately 3 hours per assessment with potential annual savings of 540 hours while maintaining human oversight. Led 25 risk-based technology assessments annually, partnering with 10+ cross-functional stakeholders per engagement to evaluate control design and effectiveness, challenge

Cybersecurity Audit Analyst

Steampunk

Apr 2019 - Nov 2019 (7 months)

Directed federal audit support across 3 major audit workstreams, including Financial Statement Audits, A-123, and internal audits, coordinating evidence collection and managing findings through POA&Ms and Mission Action Plans. Completed 20+ security questionnaires, evidence requests, and RFP responses while performing control mapping to support audit readiness, regulatory compliance, and security

Cybersecurity Audit Audit Support Control Mappings Regulatory Compliance Security Assurance POA&M Mission Action Plans RFP Security Questionnaires Evidence Collection

Advisory Project Delivery Senior Analyst

Deloitte & Touche LLP

Oct 2016 - Mar 2019 (2 years 5 months)

Directed change-management compliance activities across 300+ controls and change requests, supporting annual audits, evaluating control evidence, and guiding remediation of identified gaps. Led a 3-person team performing risk-based control testing across 50+ applications and systems, evaluating controls for SOX and PCI compliance and supporting remediation of identified deficiencies.

Change Management Compliance Control Testing SOX PCI Risk Based Testing SQL Audit Coordination remediation

Cybersecurity Analyst

Triumph Enterprises, Inc.

Aug 2015 - Sep 2016 (1 year 1 month)

Led security monitoring and incident response across 28 NIH Institutes and Centers and 100+ systems, investigating 20–30 weekly phishing, intrusion-detection, and network-security alerts using RSA NetWitness and Wireshark. Managed vulnerability management, policy compliance, and cybersecurity documentation across an environment of 100+ systems, partnering with ISSOs and security leadership to main

Security Monitoring Incident Response Phishing Intrusion Detection Network Security RSA NetWitness Wireshark Vulnerability Management Policy Compliance Cybersecurity Documentation

Applications Systems Analyst

Blue Cross Blue Shield of North Carolina

May 2012 - Aug 2015 (3 years 3 months)

Improved delivery of Medicare technology solutions serving 1M+ customers by translating business requirements into system functionality, managing QA and defect resolution, and aligning releases with HIPAA privacy and security requirements. Managed Agile delivery across 20+ user stories per sprint and a 50+ item backlog, performing QA testing, defect management, data analysis, and production suppor