At Mattel, Inc., I own enterprise security governance and application risk activities, working across Security, Privacy, IT, and business stakeholders. I develop risk dashboards and leadership reporting that make control gaps, remediation progress, and application risks easier to track.
I led Optro GRC implementation activities for application and control data, completing updates for security and privacy controls and improving ownership, reviewer assignment, and evidence traceability. I also designed an application-level control applicability approach for CCPA-scoped applications.
Previously, at New York Life, I led IT control testing and SOC 2 and ISO 27001 readiness activities. At Panthergon IT & Cybersecurity Solutions, I used Nessus/Tenable and Python to automate vulnerability reporting, reducing manual reporting effort by 60% and improving remediation follow-up by 40%.
