Delaney Wilson

About Delaney Wilson

Business Information Security Compliance Leader with expertise in policy development, implementation, and maintenance. My specialties are standardizing routines and raising awareness across organizations. Colleagues know me as an outstanding communicator with ability to partner with executives, technology/business stakeholders, and process owners to introduce structured, sustainable processes ensuring high compliance levels.‣ WELLS FARGO, OPERATIONAL IMPACTS: Introduced information security technology initiatives ensuring implementation for operational business units and risk-based areas related to operations, such as Technology Engineering, Architecture, Change Management, and others. Provided instrumental contribution to 50% overall decline in exceptions.‣ BANK OF AMERICA, STRATEGIC SECURITY POLICY TRANSFORMATION: Directed 2-year program to consolidate/simplify information security policy structure transforming policy understanding. Led team reduce Information Security Policy Portfolio documents by 45%, from 165 documents to 91.‣ BANK OF AMERICA, INTL. SECURITY POLICY: Established international Policy Lead positions within specific countries to support regulatory mapping and country/regional policy alignment; expanded information security awareness for Europe, Asia, Latin America and Canada.‣ BANK OF AMERICA, BEHAVIORAL CONTROL OBJECTIVES: Embedded behavioral control objectives in information security requirements. Incorporated data from site audits to establish and adjust policies as needed.SPECIALTIES: Executive & Stakeholder Engagement | Policy Implementation Planning | Information Security ControlsBusiness Partnering / Impact Analysis | Exception & Issue Governance | Physical Security ControlsThird-party Risk Management | Regulatory Mapping | Policy Lifecycle ManagementLeadership / Mentor / Coach | Policy Adherence Monitoring | Policies, Routines & Procedures

Experience

1. Operational Risk Manager

   Wells Fargo

   Oct 2017 — Present · Charlotte, NC, US

   Led 6 direct reports to manage IT regulatory and compliance policy development lifecycle across all divisions of 260K-employee global enterprise. Wrote, adapted, and revised implementation strategies for IT policy management within cybersecurity and technology areas. Integrated and collaborated with Information Security Policy Management team.FRAMEWORK & GOVERNANCE LIFECYCLE DEFINITION: Documented/defined policy development and implementation lifecycle. In absence of sustainable operational framework and governance structure, formalized policy management lifecycle procedures and introduced quality assurance program ensuring alignment of internal policy with authoritative regulatory sources.IMPACT ASSESSMENT & IMPLEMENTATION: Partnered with divisions to identify/measure impact of policy compliance, assist in implementing new policies, and resolve compliance issues. Led/oversaw/guided establishment of enhanced impact assessment and policy implementation activities to improve compliance monitoring; drove policy deliverables.CRITICAL ROLES & RESPONSIBILITIES DEFINITION: Led sessions to educate operational risk managers, policy owners, and process owners on roles and responsibilities within policy lifecycle and engaged them in measuring divisional impacts. United senior technology leaders, operational risk executives, and process owners to provide transparency and leadership to policy management process.CROSS-FUNCTIONAL TECHNOLOGY POLICY MANAGEMENT: Established formal procedures integrating Technology Policy Management and Information Security Policy routines to improve cross-functional policy development.POLICY EXECUTION TRANSITION: Established relationships, developed routines, and transitioned technology policy development activities from individual second line of defense division teams to centralized first line of defense Policy Management team.

Education

• Golden Gate University

  MBA, Management Information Systems

  1987 — 1989

• University at Albany

  BA, Political Science

  1985 — 1986

Skills

• Business Analysis
• Banking
• Cisa
• Business Continuity
• Information Security Management