Julie D. Talbot-Hubbard
Blacklick, Ohio 43004
Home: 614-***-****
********@*******.***
Career Summary
Experienced Information Risk & Security Manager specializing in the
management of Information Security Management and Business Resiliency
Programs by leading organizations to proactively identify vulnerabilities,
implement compensating controls, and drive remediation across complex
organizations. Proven ability to design, organize, and drive execution of
global programs using both direct and influential leadership. Exceptional
track record with developing and implementing processes while leading
others in their use.
Experience
CARDINAL HEALTH, Dublin, OH November 2008- Current
Director, Information Risk & Security Management
Enterprise Information Technology (EIT)
. Lead the Information Technology Risk & Security Management organization
at Cardinal Health, consisting of experienced managers, technical
security and resiliency experts.
. Retooled the IT Risk Assessment team, framework and their process
ensuring the proactive identification and remediation of security
vulnerabilities across Cardinal Health's applications, infrastructure,
and outsourced solutions.
. Implemented an IT Risk Policy Lifecycle based off ISO27002, ensuring IT
Risk policies are assessed and approved, security awareness training is
conducted, and an operational gap assessment is performed annually.
. Created a Business Continuity and Disaster Recovery Program across EIT,
ensuring the identification and resilience of critical business processes
and technology.
. Represent EIT on Cardinal's Corporate Crisis Management team while
managing the EIT Crisis Management Process ensuring timely
communications and rapid response.
. Enhanced enterprise SAP Security practice by implementing Role based
access, segregation of duties (SOD) prevention, Access on Demand (AOD),
and continuous controls monitoring on Cardinal's largest regulated
environments.
. Integrated Enterprise Risk Management with the IT Risk and Security
Management programs, promoting the prioritization and management of
Information Risks across the organization.
. Managing the Payment Card Industry (PCI) Remediation Program across
Cardinal Health, ensuring our customer's confidential information is
adequately protected.
JP MORGAN CHASE, Columbus, OH October 2007- November 2008
Director, Information Risk Governance, Vice President
Corporate Technology Risk & Business Services (CTRBS)
. Managed geographically dispersed team consisting of both entry level and
experienced professionals, leveraging their individual strengths to
increase the quality and quantity of team's accomplishments.
. Implemented Risk Assessment Program across CTRBS Globally ensuring a
comprehensive repeatable method to identify & assess, mitigate and manage
Risk across both infrastructure and application environments.
. Managed the Sarbanes Oxley, Application Security Testing, and Privacy
Programs across CTRBS, consisting of testing coordination, implementation
and management of Quality Assurance process, remediation tracking and
trending analysis to all levels of Management.
[pic]
. Created the Risk Management Core Curriculum and Course development within
CTRBS University, providing the required Risk Management Training to
drive organization from competent to consistent within the strategic
maturity model.
. Compiled Monthly Risk Management Metrics providing the CIO and CTOs a
consolidated view of all Risks being managed within their environment;
allowing for prioritization of both staffing and remediation activities.
. Promoted from Manager, VP to Director, VP.
JP MORGAN CHASE, Columbus, OH October 2004- October 2007
Business Resiliency Manager/Information Security Lead, Vice President
Distributed Technology Services (DTS), Global Technology Infrastructure
(GTI).
. Managed the Global DTS Resiliency Program and experienced professionals
required for the execution of; 80 Business Impact Analysis, 30 Call
Trees; testing, annual maintenance and approval of 85 Global Business
Resiliency Plans. Landscape consists of nearly 900 employees, 45
applications, enterprise Storage, Backup, and Server Operations.
. Facilitated the Audit Engagement Process in DTS ensuring a global unified
response to Audit while providing Risk Management guidance to clients
within DTS.
. Lead DTS Crisis Management Process by initiating command center,
coordinating communications and managing crisis event.
. Provide Risk Management expertise acting as a "trusted advisor" on firm-
wide Data Protection Initiative and Server Virtualization program.
. Promoted from Analyst, Associate to Manager, VP
BANK ONE CORPORATION, Columbus, OH January 2002 -September 2004
Business Resiliency Analyst, Associate
Central Technology Operations/NEO Risk Management
. Developed, managed and executed over 50 compliant business resiliency
plans within L.D.R.P.S. by fostering relationships with senior management
and consulting individual business units.
. Facilitated awareness training exercises for primary Bank One production
sites; presented mock incidents guiding exercise participants through
recovery procedures to ensure critical business recovery during an
unplanned event.
. Revitalized and strengthened business resiliency within my supported
areas by educating, motivating and advising site contacts and risk
managers; consistently received a 97% or higher on customer satisfaction
surveys.
. Actively participated and contributed resiliency risk assessments in all
bank projects & sales presentations impacting areas that I supported.
. Ensured business continuity and disaster recovery plans met bank
requirements and corporate deadlines; performed self assessment against
corporate planning requirements prior to both Resiliency Risk Management
and Corporate Audit.
. Planned and orchestrated end-to-end and component tests involving
numerous state recoveries to prove recovery strategy viability.
BANK ONE CORPORATION, Columbus, OH
SR. Field Auditor, Specialty Warehouse & Finance
August 1999- January 2002
. Performed on site quarterly customer audits; including compliance
examination of customer files, cash reconciliation, customer payment
tracing, title tracking, and computed overall delinquency ratio.
Julie D Talbot-Hubbard
. Created comprehensive audit reports for each field audit utilizing
templates I designed and implemented. Reviewed reports with senior
management, prioritized issues, and administered plan to remediate audit
issues.
. Acted as Operations Manager back-up and Lead Auditor; involving
interviewing of all new hires, daily funding, loan maintenance, lease
securitizations, and oversight of all auditors within the department..
. Compiled monthly delinquency reporting and compiled customer interest
rates for the Specialty Warehouse Finance Department.
STRENGTHS
. Organizing and managing global programs to ensure accuracy, effectiveness
and on-time completion.
. Managing complex communications and recovery efforts during critical
events.
. Establish documented processes driving continuous process improvements
and efficiencies.
. Facilitating presentations and interactive exercises to large audiences
including Executive Management.
. Developing and maintaining effective relationships by providing superior
customer service.
. Easily adapt to new environments and technology through rapid change.
. Cultivate team environment while inspiring and motivating employees for
peak performance.
. Excellent communication skills, both oral and written.
ACCOMPLISHMENTS
. Honored as the Information Security Executive of 2010 for the Central
Region, sponsored by T.E.N.
. Nominated and attended the "Smith College Executive Leadership
Consortium" in July 2008.
. Nominated for the "Rising Talents" Women's Forum for the Economy and
Society in 2007, supported by JP Morgan Chase and Egon Zehnder
International.
. Successfully passed the CBCP, CGEIT, CISA examinations, obtaining
relevant certifications sponsored by DRI and ISACA.
EDUCATION
Smith Executive Education Program, 2008
North Hampton, MA
Miami University, Oxford, OH
Richard T Farmer School of Business Administration
B.S., Business Administration
Major- Marketing
Concentration- Corporate Finance
AFFILIATIONS
Certified Business Continuity Planner (CBCP)
Certified Information Security Auditor (CISA)
Certified in the Governance of Enterprise Information Technology (CGEIT)
Member of Information Systems Audit & Controls Association (ISACA)
Member of Cardinal Health's Women's Network (WIN)
Member of Disaster Recovery Institute (DRI)
Member of BITS Financial Service Roundtable
Member of WELD (Women for Economic Leadership & Development)