Brian Robison,MBA

I bring a unique combination of technical, financial services, and regulatory expertise gained from Big 4, and over 20 years of experience in IT risk and controls. I work collaboratively with cross-functional technology groups to establish governance, with the goal of reducing audit findings and optimizing resources. My key strengths lie in defining strategic objectives, operationalizing security controls, and effectively communicating policy and regulatory requirements to stakeholders. I excel in proactively addressing controls that are at risk of non-compliance and am proficient in applying control frameworks such as NIST and ISO to implement efficient controls and assess their effectiveness in reducing risk, with a focus on continual improvement.

• NIST CSF
• NIST 800-53
• ISO 27001
• FFIEC
• GLBA
• CobIT
• Data Privacy

· Led team of 10 in developing the GRC application and executive reports.

· Achieved 100% on-time implementation of 50+ remediation action plans per year.

· Resolved control design issues with automated solutions resulting in resource optimization.

· Improved compliance by managing RCSAs and KPIs.

· Analyzed exception trends in ServiceNow to develop new risk management policies.

· Supervised a team of 5 staff members in fulfilling evidence requests for regulatory requirements.

· Achieved strategic goals through managing enterprise Cybersecurity programs.

· Rolled out clear guidance in standardizing security processes for merged companies.

• Certified Information Systems Auditor, CISA cert# 1189077
• Certified Information Systems Security Professional, CISSP cert# 437680
• AWS Certified Cloud Practitioner (CLF)
• OneTrust Platform - GDPR Data Privacy Management