Christine Valencia Caisf

About Christine Valencia Caisf

Seasoned information security and technology risk professional with 20+ years of experience in Financial Services and Big 4 advisory consulting. Repeated success fortifying control environments to align with business objectives and deliver resilient security capabilities. Demonstrated expertise in AI governance and security, and technology risk management.Practical work experience in the U.S, U.K, and Canada.Prior experience working for U.S. and Canadian regulators, and working in all 3 Lines of Defense. Areas of Expertise:Regulatory and Privacy: SOX (Sarbanes Oxley), RCSA (Risk and Control Self-Assessment), Anti-Money Laundering / Know Your Customer (AML/KYC), HIPAA, GDPR (General Data Protection Regulation), CCPA (California Consumer Privacy Act), NYDFS (New York State Department of Financial Services), EU AI ActSecurity Frameworks: CRI (Cyber Risk Institute), NIST CSF (National Institute of Standards and Technology Cybersecurity Framework), NIST 800-53, NIST AI RMF, ISO 27002 (International Organization for Standardization), PCI-DSS (Payment Card Industry Data Security Standard), CSA CCM (Cloud Security Alliance Cloud Controls Matrix), FISMA (Federal Information Security Modernization Act of 2014), FedRamp (Federal Risk and Authorization Management Program), OWASP (Open Worldwide Application Security Project) Top 10 LLM (Large Language Model).Specialties: Artificial Intelligence (AI)/ Machine Learning (ML) Governance and Security, Security Strategy, GRC, Privacy by Design, Cloud Security, RPA (Robotic Process Automation).Accomplishments: Led the Federal Reserve’s largest initiative as dedicated information security SME in the modernization of US Critical Infrastructure, Fedwire, the gross settlement funds transfer system, which transitioned from legacy system to the secure distributed environment. Managed penetration tests, threat modeling and risk treatment. Secured TD Securities Automated Trading (TDSAT) control environment managing information security for a highly visible and complex M&A integration; deployed endpoint security, privileged identity and access management, and enhanced perimeter security. Spearheaded transformation effort to automate GRC processes across TD Bank, reducing manual execution for new technology assessments by hours annually. Established RPA governance at TD Bank by developing and implementing a framework that served as the foundation for TD EUC Standards resulting in increased efficiency and accountability.

Experience

1. SVP, Cyber Governance & Risk Appetite

   Citi

   Nov 2025 — Present · US

Education

• Fordham University

  Bachelor of Arts - BA

• Fordham University

  Bachelor of Arts - BA, Communications

• Columbia University

  Master of Science - MS, Technology Management