Norman Starks

Bachelor's

Information Technology (IT)

Mathematica

Senior Information Security Analyst Risk and Control Lead

- Support Information and Technology risk taxonomy development and implementation, including development of risk appetite, key risk indicators and key performance indicators - Experience developing an enterprise risk reporting capability, and ability to coordinate information technology risk status and updates to management and Board of Directors Audit Committee - Experience leading information and technology audits and testing of security controls for design and effectiveness and coordinate third party security assessment, such as SOC2 and client-specific assessments Lead Mathematica SOC2 certification for two years - Experience facilitating, risk and control, serve as system admin for input and documenting IT processes, risks, and controls in GRC tool Auditboard - Experience developing and documenting security incident reporting process and procedures. Leading providing substantial support to the development and delivery of information and technology risk training material - Risk and Control Lead provide technical expertise and trainer for all employees for constant cyber Hygiene