Julia Michelle Jackson, CISA
Seattle,WA
Summary
PROVEN AUDIT & ASSURANCE EXECUTIVE: INTERNAL AUDIT, INFORMATION SECURITY, DATA GOVERNANCE, AND RISK
Over 15 years of leadership experience at two Fortune 100 global companies, and Europe’s largest Telecommunications provider. Seasoned international executive leader who excels at building technically strong teams, shaping the highest level of technology focused audit and assurance strategies, accelerating delivery timelines, and mentoring future leaders. Change agent who spearheads enterprise and digital transformation to enhance security, build awareness of critical risks, meet evolving regulatory compliance targets, and strengthen corporate controls. Industry expert in risk-based auditing practices. Comfortable working in an international environment.
Overview
18
18
years of professional experience
1
1
Certification
Work History
Chief Audit Executive
Deutsche Telekom
11.2024 - Current
- Chief Audit Executive overseeing and directing internal audit organizations across three Deutsche Telekom subsidiaries: T-Mobile Czech Republic, Slovak Telekom, and T-Mobile Poland.
- Executive owner and Head of Internal Control Systems (ICS) at T-Mobile Poland.
- Member of internal audit Global Leadership Team leading shared international strategy audit transformation and talent development alongside peers from Europe and US.
- Leads reporting to three audit committees, management boards, and board of directors in role as chief audit executive and head of internal audit & ICS.
- Directs four geographically separated teams, supervising twelve direct reports.
- Displays commanding executive presence, building relationships across various organizational tiers and swaying key stakeholders and senior leadership.
- Accountable for developing modern internal audit strategy driving IA transformation and cultivating high-performing, sustainable internal audit workforce.
- Leveraged artificial intelligence tools and models to boost audit proficiency, extend risk coverage, and unify risk intelligence sources from allied assurance functions (cyber risk management, compliance, legal).
- Spearheaded IA awareness campaign focused on increasing visibility, understanding, and engagement with business partners; achieved shared platform for measurement tracking alongside real-time status updates via on-demand dashboard reporting.
- Audit projects have driven Enterprise change by 1) restructuring of Corporate Security team and scope, 2) Introduced new workflows for digital sales channels, 3) established a new third party & reverse logistics program for device management.
Director, Technology and Privacy Audit
T-MOBILE US
01.2019 - 03.2024
- Advanced from senior security analyst to an influential director role. Built and evolved the IT audit practice into a critically important assurance function.
- Established T-Mobile's first internal technology audit team. Chosen from the information and cybersecurity team to build the new practice (previously outsourced) and develop a team of in-house IT auditors in just two months. The IT audit team now completes approximately 50% of total internal audit work.
- As Audit Director, led the technology and privacy audit team to meet all plan targets, complete all scheduled audits, and deliver 100% of required reporting to the IT audit committee each fiscal year from 2018 to 2023.
- Directed geographically dispersed teams, comprised of nine (9) full time employees across three (3) TMUS headquarter locations, and fully remote contract resources; collaboratively manage up to 20 audit engagements each year in the IT network, cellular network, legal/privacy, and cybersecurity areas following IIA standards.
- Engaged frequently with executive leadership (C-Suite, EVP, SVP, and VP) in finance, enterprise risk, technology, network, cybersecurity, legal, and privacy functions to align efforts, track audit issues, review industry trends, and evaluate risks of ongoing technology initiatives.
- Sat on multiple enterprise committees, including security operations governance, vulnerability and patch management, cybersecurity operations, digital transformation, aligned assurance, information security and privacy council (IS&PC), and Network Resiliency Executive Steering Committee.
- Key Achievements
- Successfully lead IT Audit practice through merger and acquisition activities starting in 2020 through 2022; onboarded and trained legacy Sprint team members, and expanded practice footprint across three (3) TMUS Headquarter locations.
- Implemented an intake process for complex, project-based analysis needs; using the new process, provided data modeling and analytic support to 20% of internal audits
- Launched a data training program to expand functional user base: to date, conducted six hands-on, code-based application training sessions (PowerBI, SQL, and UiPath)
- Developed a model to best utilize internal and externally sourced audit support, enabling the team to expand services and conduct more complex risk-based audits under tight timelines
- Nominated by the C-suite leadership team to represent the audit services and risk management department on the Diversity, Equity, and Inclusion committee
- Directed four (4) Network Resiliency audits to holistically evaluate T-Mobile’s post-merger integrated Network Technology infrastructure and supporting processes. These projects required more than 100 external resources and a budget of >$3M USD. Conducted monthly C-Suite Executive Steering Committee meetings to share progress, results and identified risks.
Senior Manager, Technology and Privacy Audit
T-MOBILE US
12.2016 - 01.2019
- Managed the annual financial services and regulatory compliance audit, as well as the NIST CSF maturity assessment, until transitioning this project to another group in 2019
- Designed a new data analysis-focused auditor position to embed analytic support in audit project teams; this increased data-focused audit work by 20% in one year
Manager, IT Audit
T-MOBILE US
04.2014 - 12.2016
- Upon promotion to team leadership, immediately assumed full responsibility for the entire annual audit plan in April, then completed all projects by the deadline at the end of the year
- Fully staffed the IT audit team by identifying, interviewing, and hiring two direct reports
- Completed a rotational training program at Deutsche Telekom as a PMO leader; coordinated development of a common audit methodology across 12 global locations
- Served as the head auditor for an international asset management audit in the Netherlands
Senior Information Security Analyst
T-MOBILE US
06.2011 - 04.2014
- As the owner of the information security risk management process, project-managed security projects from concept to completion, including scoping, schedules, and metrics
- Gathered, analyzed, and documented business requirements, use cases, and technology attributes to recommend appropriate security controls at the earliest stage of development
- Conducted functional and validation testing of new technologies and procedures in coordination with vendor stakeholders, support teams, and laboratory managers
- Promoted enterprise-level policy adherence and information security best practices
Compliance and Control Officer, Global Anti-Money Laundering (AML)
CITIGROUP
09.2008 - 03.2011
- Managed information security controls, risk management, and control self-assessment testing to ensure corporate and regulatory compliance with AML regulations for the banking industry.
- Led a team of seven contract employees who supported the entitlement, access, and provisioning process for approximately 7,000 global AML employees in the U.S. and abroad
- Created and delivered information security training content and modules; facilitated quarterly webinars, classroom-based new-hire training, and annual employee refresher courses
- Created automated SQL workflows to scan, extract, and verify key data elements for Risk and Control Self-Assessment (RCSA) testing - increased efficiency by 25%
Education
Master of Arts (MA) - Criminology
UNIVERSITY OF SOUTH FLORIDA
Tampa, FLBachelor of Arts (BA) - Criminology, Minor in Leadership Studies
UNIVERSITY OF SOUTH FLORIDA
Tampa, FLSkills
- Shaping Organizational Strategy, Audit Programs, and Regulatory Relationships to Achieve Excellence
- Building and Enhancing Cross-Organizational Partnerships with Business and Technical Stakeholders
- Risk Management and Mitigation, Incident Response, and Disaster Recovery Planning
- Regulatory Compliance and Audit Oversight: Experienced in NIST CSF, SOX, SOC, ISO27001
- Continuous Improvement, Process Mapping, and Process Automation
- Vendor Relations, Including the Preferred Suppliers Program
- Negotiating Advantageous Vendor Agreements (SLA, SOW, MSA) and Outsourcing Contracts
- Business Analytics, Technology Landscape Assessment, Business Impact Analysis, and ROI Analysis
- Coaching and Mentoring Future Leaders in Career Development
- Ensuring Optimum User Experience and Compliance Through Education, Training, and Awareness
- TeamMate Audit Management, JIRA, and RSA Archer Suite
Certification
- ISACA (formerly Information Systems Audit and Control Association) Certified Information Systems Auditor (CISA)
Timeline
Chief Audit Executive
Deutsche Telekom
11.2024 - Current
Director, Technology and Privacy Audit
T-MOBILE US
01.2019 - 03.2024
Senior Manager, Technology and Privacy Audit
T-MOBILE US
12.2016 - 01.2019
Manager, IT Audit
T-MOBILE US
04.2014 - 12.2016
Senior Information Security Analyst
T-MOBILE US
06.2011 - 04.2014
Compliance and Control Officer, Global Anti-Money Laundering (AML)
CITIGROUP
09.2008 - 03.2011
Master of Arts (MA) - Criminology
UNIVERSITY OF SOUTH FLORIDA
Bachelor of Arts (BA) - Criminology, Minor in Leadership Studies
UNIVERSITY OF SOUTH FLORIDA
CAREER HIGHLIGHTS
- As Chief Audit Executive, developed and launched a three (3) year transformational journey across T-Mobile Czech Republic, Slovak Telekom, and T-Mobile Poland. Enhancing the functions from a control-based audit environment to a modern, risk-based audit organization which leverages AI capabilities.
- As director, led the technology and privacy audit team to meet all plan targets, complete all scheduled audits, and deliver 100% of required reporting to the IT audit committee each fiscal year from 2018 to 2023.
- Incrementally increased audit capacity YoY and annual audit plan commitments by one project/year from 2016 to 2022. Built a special intake process for off-plan assurance projects, boosting total department output by three projects per year.
- During the $26B merger with Sprint in 2020, took leadership of five additional employees, including one senior manager, three auditors, and one data scientist, all of whom lacked sufficient expertise in security frameworks. Dedicated significant time to training and mentoring the acquired employees while delivering on the department's commitments.
- Executed a pre-implementation risk assessment of security controls in a highly regulated business area. Discovered major deficiencies, then partnered with the CCO and other leaders to mediate findings, offer recommendations, and identify residual and potential risks. Secured acceptance of the findings, advised legal teams, and built a trust-based advisor relationship with the team.
- Attended the 2016 International Employment Exchange program with Deutsche Telekom AG in Germany. Gained a better understanding of IT security practices in the EU.