Jamal Awow

Part of a tiger team that developed the inaugural and end to end AI risk framework at Wells Fargo, where we built out technical security controls and governance to mitigate compliance risks for high impact models. My work involved partnering with senior leadership to integrate enterprise risk management strategies and controls into new products, ensuring everything stayed aligned with NIST and ISO standards. I also led virtual teams through complex IT audit processes and independent risk assessments, focusing on strengthening our cybersecurity posture and technical testing.

I led independent testing and validation efforts at Wells Fargo by designing RCSA strategies and control validation processes across multiple technology risk domains. My work focused on scaling IT and cybersecurity audits to ensure enterprise compliance with NIST and COBIT frameworks while managing a team of risk professionals. By partnering with internal audit and senior stakeholders, I oversaw the execution of security control evaluations and handled root cause analysis for issue validation to keep risk management aligned with business objectives.

I lead the Information Security testing program at Wells Fargo, where I've scaled our annual control assessments from 10 to 60 engagements per cycle since 2017. My work centers on enterprise risk management and technical risk assessments across NIST frameworks, ensuring all IT and cybersecurity audits meet strict regulatory compliance and SOX standards. I manage the full testing lifecycle from IAM and vulnerability controls, while also negotiating risk solutions with executive leadership. Beyond the technical oversight of independent testing, I focus on team building and coaching my staff through the execution of large scale cybersecurity audits across the enterprise.

I managed the audit lifecycle for Wells Fargo Mobile and enterprise middleware environments, focusing on application security and vulnerability management using the COBIT framework and Tableau. My work involved directing technical risk assessments and independent testing while providing credible challenges to senior executives regarding risk mitigation and the control environment. I also led the recruitment and professional development for the audit team, supervising staff on each engagement and setting the strategy for annual risk planning and issue tracking.

I led several high-complexity IT and cybersecurity audits for our private cloud and network services, focusing on the capacity and performance metrics within the enterprise control framework. For our patching program and VOIP platform reviews, I worked with senior leadership to address technical risk assessments and improve critical security processes. This work required a constant focus on regulatory compliance and enterprise risk management to ensure our infrastructure met fi nancial services risk standards.

I led comprehensive IT and Cybersecurity audits across the distributed enterprise environment, focusing on technical risk assessments for core infrastructure including Windows, Active Directory, and Unix authentication systems. My work involved supervising the evaluation of confi guration management and access controls for DNS, proxy servers, and load balancers to ensure enterprise-wide regulatory compliance with fi nancial services risk standards. I managed the full audit lifecycle from project pacing and task assignment to the fi nal review of work papers and reports. Beyond technical testing of storage and backup technologies, I acted as a primary point of contact for business executives to report on signifi cant risks and control framework effectiveness.

I led a variety of technical and regulatory audits across the Fortune 500 landscape, focusing on SOX 404 compliance and enterprise risk management within the retail and insurance sectors. During these engagements, I conducted deep dives into network infrastructure security for Cisco and Checkpoint systems while managing data governance reviews that covered encryption standards and KPI reporting. My work involved performing detailed operating system and database security assessments and then translating those technical findings into issue based discussions with executive stakeholders to improve their overall control frameworks.

I supported the College of Liberal Arts migration to Windows Active Directory, focusing on Identity and Access Management and network efficiency across the regional rollout. My role involved technical support for client systems and the implementation of HIPAA compliant security practices to protect sensitive student data. This work provided an early foundation in configuration management and regulatory compliance within a large enterprise environment.

I managed the campus wide infrastructure and Cisco wireless network for over 1,000 users, focusing on secure connectivity and system reliability across various school sites. My work included maintaining Windows Active Directory and Microsoft Exchange to ensure proper identity and access management and configuration controls. I also built a computer replacement plan that cut downtime by 30 percent, which served as a foundational framework for managing technology lifecycles and enterprise risk.