Andrew Hassett

Experience

1. Cybersecurity Compliance Manager

   SoFi

   Apr 2022 — Present · New York, NY, US

   Conduct comprehensive compliance assessments against key regulatory frameworks, including SOC 2, GLBA, and SOX, for IAM, Third Party Assessment, and Vulnerability Management processes• Increased annual GLBA assessment asset testing scope by 24% and controls tested by 36% YoY• Perform security risk assessments utilizing the FFIEC Cybersecurity Assessment Tool (CAT) and the NIST Cybersecurity Framework (CSF) to identify cybersecurity maturity enhancement opportunities• Facilitate and manage internal audits, serving as a key point of contact and ensuring the provision of necessary documentation and support to adhere to strict deadlines• Coordinate and support regulatory examinations by the Office of the Comptroller of the Currency (OCC) and the Federal Reserve, ensuring a smooth and efficient process• Manage the internal Risk and Control Self-Assessment (RCSA) program, fostering a culture of proactive risk management and accountability across the organization• Collaborate with cross-functional teams, including Engineering, Legal, and Third Party Governance, ensuring integration of cybersecurity compliance requirements and best practices into business processes• Continuously monitor the evolving regulatory landscape and proactively adapt compliance programs to address new requirements and emerging threats

Education

• University at Albany

  Bachelor of Arts (B.A.), Criminal Justice and Psychology

  2012 — 2015

• University at Albany

  Master of Business Administration (M.B.A.), Cyber Security

  2016 — 2018

Skills

• Time Management
• Public Speaking
• Facebook
• Judicial Review
• Customer Service
• Writing
• Information Technology
• Animal Care
• Teamwork
• Microsoft Sharepoint
• Criminal Law
• Microsoft Office
• Research
• Microsoft Excel
• Powerpoint
• Leadership
• Community Outreach
• Microsoft Powerpoint
• Psychology
• Organization Skills
• Microsoft Word
• Python
• Social Media