• The CEO and Board of Directors hired me to investigate concerns raised by the FBI and the SEC. Based on this work, I developed strategic compliance and risk policies that aligned fraud prevention with business objectives, resulting in measurable improvements in operational quality and efficiency. • Directed global sustainability initiatives, aligning operational practices with evolving content and policy standards.
• Directed and led a global cybersecurity and risk operations team, enhancing policy, mitigating risk, and ensuring compliance and quality demands with federal agencies. (Reduced cybersecurity incidents by 30% through enhanced policies and risk mitigation.) • Collaborated with global stakeholders to design, implement, and mature enterprise - wide Third - Party Risk Management (TPRM) frameworks, policies, and procedures. (Achieved 95% completion of TPRM framework implementation across all third - party vendors.) • Led regulatory interactions, remediation efforts, and threat assessments with independent third parties to address cybersecurity risks effectively. (Resolved 100% of identified third - party cybersecurity vulnerabilities within SLA timelines.) • Delivered data - driven insights to address risks in a rapidly changing industry proactively, leveraging quantitative analysis to inform strategic decisions. (Improved threat detection accuracy by 20% through advanced data analytics.) • Led and motivated cross - functional teams to deliver exceptional operational performance, resolving complex escalations involving customers, press, regulators, and executives. (Increased operational issue resolution rate to 98%) • Managed regulatory relationships with CFPB, OCC, and FRB, ensuring timely resolution of escalated regulatory matters. (Ensured 100% compliance with regulatory agency requirements, avoiding fines.) • Collaborated with senior executives, including the Chief Risk Officer, CIO, CTO, and CISO, to provide strategic guidance on risk governance and key technology initiatives. (Facilitated risk governance meetings with 100% on - time executive participation.) • Directed enterprise - wide Technology and Security risk management programs, ensuring compliance with global regulatory requirements and industry best practices. (Maintained 100% compliance with global regulatory standards for technology and security risk management.)
• Provided subject matter expertise on innovation, technical risk, cybersecurity, and operational management to drive high - quality decision - making. (28% increase in enrollment, 92% approval surveys) • Created trust, risk, and policy advisory courses to prepare leaders for complex business problems and demonstrate actual scenarios. (Highest rated non - tenured instructor, 98% positive blind feedback rate)
• As a key leader in Bay Area Trust and Safety Leadership, I defined the team culture. I evangelized and instilled a culture of innovation across a historically neglected, slower - moving organization. • Focused the team on enabling business operations while mitigating cyber risk to ensure regulatory compliance. • Implemented risk mitigation strategies and platforms (DLP, UEBA, UAM, and SIEM) to address insider threats proactively.
• Managed global security operations for classified programs w / SCIF's (CIA, DoD, NSA), overseeing insider threats, physical security, loss prevention, and GSOC initiatives.
CCISO, CISSM, CISM, CFI, CPP