Emily Brewer, MBA, CSPO

Built a shared services team responsible for the administration, management, and supervision of the organization’s front-line monitoring program to ensure internal controls worked as designed and expected for risk generating processes; supported 180+ employees. Oversaw the growth of the initial team from 6 to over 30 employees. ➥ Orchestrated policy changes across the organization; developed implementation plans with complex deliverables and established communication routines across program partners and stakeholders ➥ Created and controlled centralized inventory of self-assurance activities, processes, and controls spanning over 15 lines of business (LOBs) ➥ Prepared monthly business unit reviews and risk committee (executive level) reporting that provided transparency and insights into key activities, issues, risks, and trending ➥ Participated in Risk & Control Self-Assessment (RCSA) workshops to identify existing controls and control gaps, ensure consistent control language is applied, and own controls as needed ➥ Gathered artifacts and deliverables for internal audit; prepared teams for audit/exam walkthroughs ➥ Developed and implemented the change management process; introduced and onboarded the team to Agile methodologies with focus on Kanban and scrum ➥ Initiated a cross-LOB (line of business) forum for sharing best practices, strategies, and tactical approaches to establishing formal Quality Assurance programs

Hired as individual contributor and promoted to leadership role. Spearheaded a team responsible for delivering large, high priority data-related initiatives (e.g., Data Governance Target Operating Model, Data Policy, and Data Privacy). ➥ Pioneered the development, documentation, and maintenance of EDG processes, procedures, risks and controls ➥ Proactively identified potential risks and developed associated mitigation strategies and plans ➥ Managed and maintained a view into complex, high priority data related initiatives across the enterprise and orchestrated data governance participation as necessary, including the creation and maintenance of the Enterprise Data Governance Operating Model, development and publication of the Enterprise Data Management Policy, the Data Risk and Control Framework, and Data Privacy (e.g., GDPR, CCPA) ➥ Developed comprehensive initiative structure and associated guidelines to track the completion of deliverables to support regulatory matters of significance and represented the team in audit and exam related activities; developed executive reporting on board level milestones

Hired as senior system analyst and promoted through roles of increasing complexity and responsibility including team leadership, overseeing vulnerability management, managing multi-million dollar projects, and ensuring regulatory compliance. ➥ Spearheaded vulnerability management program for the bank’s 300,000+ infrastructure assets nearing end of life or end of support including oversight and alignment across the enterprise in order to reduce operational and technology risks, maintain network availability, and maximize return on investment through a predictable infrastructure release program ➥ Defined Key Performance Indicators (KPIs) to measure the organization’s success ➥ Built strong relationships with technology platform teams and service partners (Engineering, Asset Management, Operational Risk, Project Management Organization, Service Delivery Teams, Finance, Supply Chain, etc.) ➥ Created reporting strategies and executed through implementation; developed dashboards in Tableau ➥ Product owner of two proprietary applications; reviewed and prioritized net-new and system enhancement requests, assigned projects/user stories to developers and oversaw the testing, change management and problem management processes for both applications