| 20,000+ Fresh Resumes Monthly | |
|
|
| | Click here or scroll down to respond to this candidateDONNAWILSONPHONE NUMBER AVAILABLEEMAIL AVAILABLEGulfport, FL Street Address
CONTACTSKILLSSkilled in effective communicationand consultation with seniormanagement and internal subjectmatter experts.Display a strong grasp of businessacumen, facilitating an in-depthunderstanding of overarchingbusiness concerns.Acquiring proficiency in varioustechnologies and coding languagesincluding Machine Learning, Python,Artificial Intelligence, and businessanalytics.Skilled in Microsoft PowerPoint with atalent for strong writing. Compliance Management Regulatory Frameworks Vendor Risk ManagementSeasoned Cybersecurity Manager with a proven track record at CBIZ, leading cross-functional teams and orchestrating comprehensive assessments to fortify data security. Expert in regulatory frameworks and compliance management, with a strong command of Python and articulate communication. Spearheaded risk management initiatives, ensuring GDPR and HIPAA compliance.PROFESSIONAL SUMMARYInformation Technology/Cybersecurity ManagerCBIZ, FloridaManaging ConsultantControl Logics, FloridaEXPERIENCEAugust 2019 - April 2024Conduct comprehensive cybersecurity assessments, examinations and attestations utilizing industry-standard frameworks such as NIST 800's, ISO 27001 and 27701, GDPR, HIPAA, and SOCLead cross-functional teams in the identification and remediation of control gaps in systems and processes, developing plans of actions and overseeing implemented resolutionsExtensive exposure to North American and European Union (EU) regions, demonstrating proficiency in navigating complex regulatory landscapes, particularly in GDPR (General Data Protection Regulation) compliance and addressing regulatory concernsEffectively project-manage client internal and external assessments, leveraging extensive business analysis and process improvement proficiency to ensure strict compliance with security standards and regulatory mandatesPartner with diverse security, privacy, and information technology teams to develop and execute privacy programs aligned with industry standards and regulatory frameworksLead the development and training of teams on security and privacy protocols, tailored to client contractual obligations, government regulations (both domestic and international), and data handling protocols encompassing transit, storage, retention, and disposalDesignated subject matter expert (SME) overseeing Cyber Risk, ISO, and GDPR assessments and engagementsLead risk management projects for clients, encompassing creation of risk assessments, compliance monitoring, regulatory oversight, and spearheading Business Continuity and Disaster Recovery initiatives.November 2018 - January 2019Director of TPA AuditTeil Limited, FloridaAudit Managing ConsultantAuditwerx, FloridaAudit ManagerShinn & Company, LLC, FloridaInternal Audit DirectorManaged engagements with international partners, demonstrating adeptness in navigating GDPR compliance and resolving regulatory challengesCollaborated with clients to develop and implement HIPAA-HITRUST, COSO, COBIT, and regulatory agreed-upon proceduresManaged engagements surrounding Third Party Risk Management (TPRM) or data center operationsRemained current with industry trends, privacy regulations, and emerging threats, taking initiative-taking measures to enhance privacy and security protocols.March 2018 - October 2018Led SOC 1 and SOC 2 Type 2 engagements, collaborating closely with TPA clients and external auditors to ensure successful completion Collaborated with IT, operations, and compliance teams to facilitate the transition to a new TPA platform for processing insurance products and services, spanning from applications to claims processing Led the data governance program from a compliance perspective. Transferred position to Trans America's Corporate Offices in Des Moines, Iowa, in November 2018.January 2016 - March 2018 Oversaw multiple engagements and coordinated diverse teams Engaged actively in industries including healthcare, third-party administrative groups, collection agencies, and business associate groups, focusing on compliance with HIPAA and Hi-Tech regulationsFunctioned as the Qualified Security Assessor (QSA) for PCI DSS readiness assessments and engagements Generated concise and informative reports for senior management. October 2014 - December 2015Pioneered the establishment of the company's internal audit function from inceptionLead comprehensive risk management initiatives across the company, encompassing the development of risk assessments, oversight of compliance monitoring, regulatory adherence, and spearheading Business Continuity and Disaster Recovery strategiesStrategized and implemented operational, compliance, and investigative audits across diverse business sectors, employing a risk-based audit methodology.September 2011 - October 2014Amerilife Group, LLC, FloridaEstablished departmental methodologies, including SOX and COSO frameworks, alongside robust quality processesImplemented a comprehensive risk assessment model for evaluating and prioritizing corporate-wide risksProvided direct quarterly updates to the Audit Committee regarding annual planning, scheduling, risk assessments, staffing, and presentation of audit reports Accountable for the management and leadership of teams of up to 15 members Engaged participant in financial and IT project teams, offering recommendations and support in project planning and implementationLead comprehensive risk management initiatives across the entire company, encompassing the creation of risk assessments, oversight of compliance and regulatory matters, and spearheading Business Continuity and Disaster Recovery endeavors.Master of Information Systems Management (MISM)DeVry Keller Graduate School of ManagementMinor in Project ManagementBachelor of Science (BS) in AccountingUniversity of South FloridaMaster of Business Administration (MBA)Tampa CollegeBachelor of Arts (BA) in FinanceUniversity of South FloridaEDUCATIONJune 2015USJune 1991January 1988June 1986CERTIFICATIONS CPA - Active, FL and GA CISA Active CDSPE Active ISO 27001 2022 Active CIPP/E 2024 CIPM 2025References available upon requestREFERENCES |