At Global Payments, I led an end-to-end ServiceNow IRM implementation as part of an enterprise redesign of the Risk Review and TPRM program. The work cut manual risk tracking effort by approximately 50% and improved audit readiness.
At City National Bank, I directed the enterprise Data Retention and Destruction Program, achieving 97% compliance across 97 applications and reducing over-retained data by 78%. I also served as the division's primary liaison to internal and external auditors.
At Ernst & Young, I advised clients including Uber, Santander Bank, and Kaiser Permanente on third-party risk programs and vendor assessments. I ran the vendor security assessment lifecycle using a 110-question assessment across 17 domains aligned to NIST and ISO 27001.
Most recently, through Motion Recruitment for Comcast Xumo, I drove remediation of a corporate internal security audit spanning 80+ applications. I rebuilt the issue management model and established recurring control epics so closed findings were backed by operating controls.
