Brent V.

About Brent V.

Brent is an Operational Risk Manager with Synchrony Financial. He has over 15 years of experience in leading and managing cybersecurity and risk teams and programs, with concentrations in risk management, application, network, and infrastructure security, vulnerability management, resiliency, cloud and penetration testing. He holds several credentials, including CISSP, CISM, CRISC, CCSK, and PMP.Brent is passionate about building and maturing cybersecurity capabilities and programs from the ground up, using DevSecOps, agile project management, and risk frameworks such as NIST, ISO, CRI, PCI-DSS, and CIS. He has successfully matured the penetration testing program at Truist through governance enhancements and resource management, established and integrated the Red Team program, and designed and implemented an enterprise-wide insider threat program at a previous companies. He also served in the public sector as a Counterintelligence Special Agent and Marine Corps Infantry officer, with deployments to Iraq and Afghanistan. Brent\'s mission is to protect the organization\'s assets and data from internal and external threats, while enabling business innovation and growth.

Experience

1. Operational Risk Manager

   Synchrony

   Nov 2024 — Present · Charlotte, NC, US

   As a key member of the 2nd Line of Defense (2LOD) Operational Risk Management team, I provide independent oversight and challenge to Synchrony\'s Information Security and Operational Resilience organizations (1LOD), helping to safeguard the enterprise against technology, cyber, and operational risks. I partner closely with stakeholders across all lines of defense to ensure effective identification, assessment, and mitigation of operational risks tied to security threats, vulnerabilities, and incidents.My core responsibilities include: • Leading in-depth Targeted Risk Reviews of critical security domains to evaluate control effectiveness and emerging threats • Issuing 2LOD opinions on Risk Acceptances, ensuring risk decisions are well-reasoned and within tolerance • Overseeing the lifecycle of both 1LOD and 2LOD-owned risk issues, from identification to sustainable resolution • Conducting independent post-incident reviews of cyber incidents, identifying root causes and recommending control enhancements • Providing credible challenge and thought leadership on operational risk frameworks, metrics, and governanceWith a sharp focus on cyber resilience, I drive risk transparency and influence risk-aware decision-making across the organization.Training & Coursework:• ISACA Certified in Risk and Information Systems Control (CRISC)• Google AI Essentials Certificate• Artificial Intelligence (AI) Risk and Cyber Security• TryHackMe: Artificial Intelligence (AI)/Machine Learning (ML) Security Threats

Education

• Mercyhurst University

  Bachelor of Arts (B.A.), Intelligence Studies

  2001 — 2005

• Mercyhurst University

  Bachelor of Arts (B.A.), Russian Studies

  2001 — 2005

• New York University

  Master of Arts (M.A.), International Relations

  2014 — 2016

• Norwich University

  Master of Science (M.S.), Cybersecurity

  2018 — 2020