Summary
Overview
Work History
Education
Skills
Websites
Certification
Publications
Timeline
Generic

Jeremy Watson

Summary

Dynamic Cybersecurity Analyst with extensive experience leading third-party risk management initiatives and enhancing vendor risk strategies. Proven track record in executive reporting and team mentorship, driving compliance with regulatory standards. Expertise in continuous monitoring and risk analysis, ensuring robust security postures across financial and healthcare sectors.

Overview

14
14
years of professional experience
1
1
Certification

Work History

Cybersecurity Analyst III

First Citizens Bank
03.2023 - Current
  • Directed enterprise TPRM program maturity for a major regulated financial institution, overseeing assessments for 200+ vendors using SIG/SIG Lite, SOC 2 Type II, and NIST standards.
  • Served as Tier-2 escalation expert and mentor for junior analysts, resolving complex risk issues and optimizing remediation strategies.
  • Designed and implemented continuous monitoring framework with BitSight, detecting breaches, threats, and posture shifts to proactively mitigate risks.
  • Collaborated with Legal and Procurement to negotiate and redline security terms in MSAs and contracts, ensuring enforceable, risk-aligned provisions.
  • Facilitated cross-functional risk decisions across Technology, Business, Compliance, and Legal teams, balancing security with business priorities.
  • Enforced compliance with GLBA, SOX, GDPR, CCPA, and internal policies via robust controls and remediation tracking.
  • Produced executive reports on vendor risk posture, remediation progress, and program metrics for leadership and regulators.
  • Spearheaded process enhancements that boosted assessment efficiency, consistency, and overall risk visibility enterprise-wide.

Senior Cybersecurity TPRM Analyst

Silicon Valley Bank
10.2022 - 03.2023
  • Executed third-party risk assessments and compliance reviews in a dynamic financial services landscape, supporting data privacy and security controls for informed business decisions.

Healthcare Compliance Consultant (HIPAA & HITRUST)

Sword & Shield Enterprise Security, Inc.
01.2017 - 10.2022
  • Led security and privacy consultations for executive clients, delivering HIPAA/HITRUST audits, risk assessments, gap analyses, and remediation plans.
  • Conducted vendor risk evaluations and Business Associate audits for healthcare entities.
  • Developed and governed security policies, procedures, and staff training programs.
  • Provided expert breach response consulting and regulatory advisory services.

Governance, Risk & Compliance (GRC) Consultant

Avertium
01.2017 - 10.2022
  • Offered strategic GRC advisory to mid-to-large enterprises in regulated sectors, designing scalable security programs aligned with business goals.

Program Director

Education Corporation of America
02.2012 - 01.2017
  • Oversaw pharmacy technician program operations, including faculty management, budgeting, curriculum development, and regulatory compliance.

Education

B.S. - Health Science

South College

A.S. - Natural Science

Roane State Community College

Skills

  • Third-Party Risk Management Program Leadership
  • Vendor Risk Strategy & Governance
  • Continuous Monitoring Development
  • Team Mentorship & Escalation Support
  • Executive Reporting & Board Presentations
  • Regulatory Compliance & Audit Readiness
  • Data governance
  • Risk analysis
  • GRC Platforms
  • Vendor risk assessments
  • Financial & Healthcare Security Expertise

Certification

• Certified HITRUST Practitioner (CHP)
• HealthCare Information Security & Privacy Practitioner (HCISPP)
• ISC² Healthcare Certificate Program

Publications

  • Reviewer, Dosage Calculations Textbook – McGraw-Hill
  • "Complying with HIPAA Encryption Standards: What You Need to Know"

Timeline

Cybersecurity Analyst III

First Citizens Bank
03.2023 - Current

Senior Cybersecurity TPRM Analyst

Silicon Valley Bank
10.2022 - 03.2023

Healthcare Compliance Consultant (HIPAA & HITRUST)

Sword & Shield Enterprise Security, Inc.
01.2017 - 10.2022

Governance, Risk & Compliance (GRC) Consultant

Avertium
01.2017 - 10.2022

Program Director

Education Corporation of America
02.2012 - 01.2017

B.S. - Health Science

South College

A.S. - Natural Science

Roane State Community College