Information Security Risk Management
Resume:
Leah O’Grady
Phoenix, AZ
https://www.linkedin.com/in/leah-o-grady
CISA ® CISM ®
Area of Expertise:
SME understanding of Industry-wide Risk Management Frameworks
oCOBIT
oNational Institute Standards and Technology (NIST 800-53)
oPayment Card Industry Security Standards (PCI-DSS)
oSarbanes Oxley (SOX)
oSANS CIS controls
oSOC 2
Proven ability to apply critical thinking skills to effectively assess and challenge process, risks and controls to identify emerging risks and issues.
Proven ability to build strong relationships with business partners and teammates to influence change and drive efficiencies.
Proven ability to communicate effectively across all Lines of Defense to build collaborative relationships.
Deep understanding of the linkages between Enterprise common processes, including IT General Controls and risk and control self-assessments.
Experienced project leader with a proven track record for successfully directing all phases of a complex information security project.
Professional Experience:
USAA, Phoenix, Arizona Oct 2021 - Current
FSB-Bank Tech and Data Risk Office
Business Risk and Controls Lead
Lead Control tester providing oversight and enhancements to mature CTDO control testing practices. Facilitates control testing walkthroughs, gathering evidence and utilizes RMAG mandatory templates to complete testing work papers for SNOW testing requirements.
Provides thought leadership to CTDO control testing team and Issue Management peer team for action plans requiring validation or control testing.
Responsible for various control testing metrics/reporting, leadership communications and Risk Activity Review (RAR) presentations for various leadership audiences.
Responsible for maturing control testing protocols, training and solutions to ensure no past due or incomplete control tests.
USAA, Phoenix, Arizona Feb 2020 – Oct 2021
FSB-Bank Tech and Data Risk Office
Business Risk and Controls Lead
Responsible for governance and monitoring of the Bank Information Security domain.
Provided Bank IAM team with subject matter consultation to improve IAM Bank user access controls.
Actively participated in the 2019 ICFR Remediation effort and collaborated with Bank key stakeholders and ICFR consultants to complete the packages timely with accuracy.
APEX Consulting, Phoenix, Arizona Jun 2019 – Feb 2020
Wells Fargo Bank, Chandler, Arizona- Remote
Information Security Consultant
Performing risk assessments, identifying risks and assigning actions plans as second line of defense.
Insight Global Consulting, Phoenix, Arizona Feb 2019 – May 2019
PayPal, Scottsdale, Arizona
Information Security Risk Assessor Consultant
Collaborated with PayPal Information Security team to actively participate in Venmo, Braintree and HyperWallet annual risk assessments. Utilized internal policies and procedures to document and map global legal obligations and inherent risks to each platform.
Collaborated with the business to map policy and procedures in GRC Pulse.
American Express, Phoenix, Arizona Various Roles Nov 2000 – Dec 2018
Governance Liaison –Regional Manager
Regional manager providing US support for customer crisis recovery and goverance of event strategies.
Responsibilities include active monitoring of man made and natural crisis events,provided event strategy recommendations to senior business leaders. Coordinated regional risk assessments to identify strategies and line of business action responses.
IT Information Security Manager- Technology Risk Assessments
Global Network Services Technology Program Manager leading Information Security third party assessors (IBM).
IT Standard custodian for Information Security User Access, Vendor Management, Data Retention and Acceptable Use Policies.
Successfully completed risk assessments and metric reporting on time in alignment with Enterprise objectives, focus on iCloud strategy and controls.
Completed 100+ low risk exceptions assessments to mitigate Enterprise risk.
Information Security Manager- Global Network Services
Effectively managed multiple information security initiatives including incident management, securing network firewall projects and database user access reviews.
Successfully managed Joint Venture audits resulting in reduced internal audit findings.
Established positive relationships with General Counsel, Compliance and Ethics offices to support security controls.
Sarbanes-Oxley and Payment Card Industry Data Security Standards subject matter expert for unit.
Various roles during American Express employment
Technology Finance Analyst- Tech Finance
Project Manager- Change and Incident Management
Project Manager- Business Technology
Third Party Security Assessments
Education
Phoenix Community College, Phoenix, AZ
Glendale Community College, Phoenix, AZ
Awards
FSB Bank Tech and Data Risk Office March 2023 Outstanding Performance Recognition
American Express Technologies Top Performer Award
American Express Chairman Award for Outstanding Performance
Systems and Applications:
SNOW-Control Testing and Reporting
IMSN- Action Plan Validations and Issue Management
PRCI and RCSA systems
Agile project management
Contact this candidate