Requests
150
0
Keep in touch with meI'm using Intch to connect with new people. Use this link to open chat with me via Intch app
Work Background
GoogleCompliance Program Manager
May. 2023 - Sep. 2025Atlanta, Georgia, United StatesRegulatory Compliance and Compliance Design
Led security and privacy audits (DMA 15) with internal and external teams, improving regulatory alignment and vendor readiness. Formalized and expanded the User Counting Program, adding Ads products and managing a team of 4, resulting in full automation of compliance reporting for legal filings, audits and RFPs. Revitalized Atlanta Campus programming, driving local engagement through targeted communications and workforce initiatives.
GoogleProgram Manager
Jul. 2021 - Jul. 2025Atlanta, Georgia, United StatesEngineering Compliance Authorized Buyer Audits & Subprocessor Audit Manager (Health & Ads) who drives the execution of vendor audits, audit roadmaps and remediation plans, help improve and measure current processes and designs to streamline execution and optimize for efficiency and Work cross-functionally with the various teams
Orientation and onboarding community building for new employees
VeracodeSenior IT Risk & Compliance Analyst
Feb. 2020 - Jun. 2021Burlington, Massachusetts, United StatesPlanning and execution of assessments and gap assessments for SOC 2/3 and ISO 270001 Assists with ongoing evaluation and implementation of proper controls to align with GDPR, NIST 800.53 and other relevant Privacy regulations. Develop, enhance and update Information Systems policies and procedures and related documentation.
VeracodeSenior Information Technology Analyst
Feb. 2020 - Jun. 2021● Delivered risk analyses to senior leadership, enabling executives to make informed decisions that reinforced governance frameworks.
● Streamlined monitoring processes with automated testing tools that reduced manual workloads by 30%, improving efficiency and audit preparedness.
● Enhanced vendor compliance documentation by embedding accessibility and security standards, ensuring alignment with evolving regulatory expectations.
● Led SOC 2/3 and ISO 27001 audits, aligning enterprise controls with GDPR and NIST 800.53 frameworks to enhance compliance across multiple business functions.
Iron MountainSenior Information Security Analyst
Nov. 2015 - Nov. 2019Boston, MassachusettsDevelop, update, and review security documentation for security stakeholders including SIGs, White Papers, and Policies, Procedures and Standards. Assist with the planning and remediation efforts and risk assessment for FedRAMP, ISO 27001, GDPR, PCI reviews and compliance. Interview, manage, and mentor summer interns. Enhanced the customer security information request, creating an automated process that streamlined response times and reduced manual requests by 75%.
Led employee resource group and managed company communications increasing membership, participation, and awareness by 25% in 1 year.
Blue Cross Blue Shield of MassachusettsSr Security Risk Analyst
May. 2015 - Nov. 2015Greater Boston AreaEnsured compliance with Third Party Services Policy and Standards related to PCI, PHI, and HIPAA. Performed risk analysis to assess the security risk of over 50 vendor partners including security attestations, credentials, and certifications. Communicated vendor security risk to stakeholders including IT and business senior leadership. Assisted stakeholders in mitigating risk including negotiating appropriate contractual terms with vendors.
National GridSenior Risk Analyst
May. 2014 - Jan. 2015Greater Boston AreaServed as a subject matter expert in the areas of Information Security (IS) controls and risks throughout the organization. Updated Standard Operating Procedures for the Risk Group. Identified, responded, communicated, and monitored IS risks to IS Leadership and elevated risks as appropriate to corporate leadership.
Presented risk analysis to stakeholders quarterly and closed 20% of open issues monthly.
Conducted annual internal and external security audits, reducing findings by 25% quarterly.
Responsible for implementing a robust risk framework, ensuring that the organisation identifies, responds, communicates and monitors IS risks.
Ernst & YoungSenior Accountant Audit
Jul. 2012 - Apr. 2014● Collaborated with executives to integrate accessibility requirements into audit documentation and training.
● Trained 20+ new staff and interns, improving team capabilities and advancing audit quality standards.
● Delivered external audits across financial services, providing actionable findings that reduced regulatory exposure.
● Led IT risk and assurance audits for SOX and SSAE 16, ensuring compliance with CoBiT, ITIL, and other industry frameworks.
EYSenior Advisory Associate
Jun. 2012 - Apr. 2014BostonCollaborate with other members of the engagement team to plan the engagement and develop work program timelines, risk assessments, and other planning documents. Work with the engagement team to document the business processes dependent on information technology. Serve as a fieldwork leader by directing the daily progress of fieldwork, informing supervisors of engagement status, and managing staff performance. Utilized experience with CoBiT, ITIL, SSAE16, SOC2, risk assessments, IT security assessments, and control development, to assist in the planning, fieldwork, and execution of external audits and SOX audits and SSAE 16 reports across a variety of industries including Banking, Wealth Management, Insurance, and Healthcare.
Provided on-boarding support and training to over 20 staff and created and facilitated training for interns and new hires.
Rebuilt Employee Resource Group (ERG) programming, enhancing communication and participation in events in collaboration with external organizations, increasing community engagement.
KPMGInformation Technology Internal Auditor
Nov. 2010 - Jul. 2012● Managed a team of 200 from onboarding , training support and mentoring for a large on site critical client consulting project, developing training materials and delivering training, streamline the process and complete the project under budget.
● Created an online review tool and SOP to complete SCRA projects and increase accuracy of findings by 60%.
● Delivered external audits across financial services, providing actionable findings that reduced regulatory exposure.
● Led IT risk and assurance audits for SOX and SSAE 16, ensuring compliance with CoBiT, ITIL, and other industry frameworks.
KPMG UKAdvisory Associate
Nov. 2010 - Jun. 2012Greater Boston AreaProvided IT Audit and Security Consulting and assisted in the planning, fieldwork, and execution of Internal Audits, SOX Audits, and system reviews as well as policy and procedure design and development. Managed a team of 200 to complete a consulting project, providing on-boarding support and creating training materials and delivering training to streamline the process and complete the project under budget.
Created online review tool and training manual to complete SCRA project and increase accuracy of findings by 60%.
RaytheonInformation, Governance and Risk Specialist
Mar. 2008 - Sep. 2010As the Subject Matter Expert on Internal Controls and Governance, coordinated the Internal Control Excellence Project Management Office. Monitored and tracked IT audit activity across the company and reported metrics and monthly analysis to stakeholders.
Revamped and maintained IT Governance Website, increasing business usage and automation by 45%
Streamlined the review and update of Company and IT Policies to meet standards and reduced review time by 30%.
RaytheonProgram Manager Training Specialist
Jul. 2007 - Feb. 2008Coordinated online training tutorials and tool overviews for Governance and controls organization. Assisted Project Managers with finding the right tools and training needed to complete projects. Assisted on Project teams as a System Analyst Coordinate small projects within the organization
RaytheonStaff Auditor
Dec. 2006 - Jun. 2007•Assist in the planning, fieldwork and execution of Raytheon Internal Audits and Reviews
•Currently working on creating a skills database the track team skills and strength
RaytheonBusiness Systems Analyst
Mar. 2006 - Dec. 2006•Bridged the gap between Communications and IDS IS by collecting customer requirements and delivering the preliminary work towards an action plan for IDS Communications portal roll out
•Worked closely with IDS BD on two initiatives focused on efficiency and better customer/subcontractor relations
•Evaluated COTs solutions and ran demo evaluations to chose the best products for the project
•Created training schedule and test plans to train users
•Trained users and then created evaluation metrics
•Created Training manuals and “How To” presentations
RaytheonIT Leadership Development Program
Jul. 2005 - Jun. 2007Data Center Analyst focusing on infrastructure and other services
Systems Analyst focusing on IS Programs with the BD, JBI and MMS functions
Staff Auditor Corporate Internal Audit
RaytheonData Center Analyst
Jul. 2005 - Feb. 2006•Work closely with Data Center management to improve data center processes
•Created a Waiver form database to track Justifications for waivers not in compliance with Sarbox procedures
•Tailor and maintain project checklists to prioritize the Data Center’s key projects
•Created a website with service request functionality, worked with a team to automate part of the customer information capture process and streamline it with our current system
•Used Camtasia to create a video documenting how to best utilize the website and online order form
•Attended bi-weekly meetings of the Best Value Service Delivery team, to better access how the Data Center could better serve our customers
Babson CollegeInformation and Web Assistant
May. 2003 - May. 2005Assistant Reference Librarian
Intch is a Professional Networking App for the Future of WorkSee more people like Melony on Intch
300k+ people
130+ countries
AI matching
Get Intch if you'd like to
1007666 people
16
Producer @ iHeartMedia Cincinnati
16
Creative
15
Production Assistant
77014 people
16
Creative Director / Copywriter
17
Marketing Director
15
Independent Contractor