Andrea Craig

About Andrea Craig

Andrea Craig is a Cybersecurity Principal at EY focusing on Cyber Transformation. Andrea has over 15 years of experience leading cybersecurity transformations, assessment and design, IT risk management, IT governance and IT compliance services. Andrea specializes in leading complex cybersecurity assessment, transformational design and compliance projects. She is highly experienced in security frameworks and regulatory standards including ISO/IEC 27001:2013 and NIST Cybersecurity Framework. She has worked in both the Americas and EMEIA with EY where she regularly manages cross-functional global teams.Prior to specializing in cybersecurity, Andrea began her career as an IT Auditor focusing on SOX 404 and IT internal audit.

Experience

1. Principal

   EY

   Aug 2004 — Present · Seattle, WA, US

   Andrea joined EY\'s Seattle office in 2004 supporting West coast based clients. In 2011, Andrea re-located to EY\'s Netherlands practice until 2014 when she re-joined EY\'s US Cybersecurity group.

Education

• Santa Clara University - Leavey School of Business

  Bachelor’s Degree

  2000 — 2004

Skills

• IT Controls
• IT Transformation
• Internal Audit
• Information Security Consultancy
• Sox 404
• Global Cross-Functional Team Leadership
• Iso 27002
• Nist Csf
• IT Compliance
• Information Security Standards
• Iso 27001
• Project Management
• Risk Assessment
• Internal Audit Transformation
• Cissp
• IT Strategy
• Cism
• Information Security
• Pci Dss
• Cloud Security
• IT Risk Management
• IT Audit
• Qsa
• Leadership
• Cisa
• Cyber-Security
• Information Security Management
• Nist
• Iso 27001 Lead Auditor
• Iso 27000
• IT Auditors
• Consulting
• International Management Experience
• Program Management
• IT Governance