Farid Abdelkader

About Farid Abdelkader

Cybersecurity Audit and Risk Executive with over 20 years of increasing experience, responsible for leading Protiviti’s National Cybersecurity Audit Program and ISACA Metropolitan New York\'s 4,500 members as their current President. Successfully implemented dozens of Fortune 500 Cybersecurity and Privacy Programs, IT Audits, performed Cybersecurity, Vendor, IT Risk, and Privacy assessments in the Financial Services, Insurance, and Life Sciences space. Disaster Assistance: Current Executive Officer of the YellowBoots Long Term Recovery and Disaster Preparedness OrganizationCurrent Executive Officer of the Staten Island Interfaith Long Term Recovery OrganizationCurrent Voting Director of New York State Governor\'s Storm Recovery OfficeAs an executive officer of Sandy Yellow Team / YellowBoots and Officer of the Staten Island Interfaith and Disaster Preparedness Group- Experience in Humanitarian Aid, Casework Management, Disaster Coordination, Mold Remediation, Home Rebuild and Restorations, and active/limited Government Liaison across all major natural disasters across the continental United States and abroad.Professional Associations:ISACA (Information Systems Audit and Control Association) New York Metropolitan ChapterExecutive Board Member 2016+ President (Board of Directors) July 2021- PresentVice President (Board of Directors) July 2019- June 2021Corresponding Secretary (Board of Directors) June 2017- July 2019Recording Secretary (Board of Directors) March 2016- June 2017Active CSX Liaison for the Metropolitan NY Chapter to National 2016 to PresentAwards:Received over 20 United States Congressional, State Senate, State Assembly, City Council, and Mayoral Citations and awards for Leading D.R. efforts in NYC after Hurricane Sandy and IDA, OK after their tornadoes, C.O. after their flooding, Nepal after their earthquakes, and Texas/Florida/Alabama after Hurricane Harvey/Irma/Maria.2017/2018/2019 Recipient of the ISACA Metropolitan New York President Awards2010 Recipient of the NJ ISACA Presidents Award.Active Certifications:Cybersecurity Maturity Model Certification (CMMC-RP), Certified in Cyber Security Practitioner (CSX-P); Certified Ethical Hacker (CEH); Certified Data Privacy Solutions Engineer (CDPSE); Certified Information Security Manager (CISM); Certified Information Systems Security Professional (CISSP); Certified in Risk and Information Systems Control (CRISC); Certified Information Systems Auditor (CISA); Microsoft Certified Systems Engineer (MCSE); Payment Card Industry Qualified Security Assessor (PCI-QSA).

Experience

1. Global Head of Technology Audit and Associate General Auditor, V P

   New York Life

   Sep 2022 — Present · New York, NY, US

   Audit and Risk Executive with over 20 years of progressive experience, currently leading the Global Technology Audit Program at New York Life Insurance Company, encompassing both strategic insurance and investment subsidiaries. I collaborate closely with Technology Operations and Risk leadership to deliver aligned assurance, enhance resilience, and drive operational efficiencies across the business.My expertise spans IT Audit, Cybersecurity, Third-Party Risk, and Privacy assessments within the Financial Services and Insurance sectors. I have successfully implemented Cybersecurity and Privacy Programs for multiple Fortune 500 organizations, ensuring compliance and risk mitigation across all three lines of defense.I maintain strong oversight of regulatory compliance for both insurance and investment subsidiaries, addressing key regulations such as NY DFS 23 500, CCPA, DORA, GLBA, and HIPAA, along with investment regulations relevant to global investment boutiques such as Luxembourg (CSSF), France (AMF), Australia (ASIC), the UK (FCA), and others impacting asset management firms including AIFMD, MiFID II, UCITS, GDPR, SIFMA, and ESG disclosure mandates. As the lead founder of an insurance cohort comprised of over 10 Fortune 500 Insurance organizations, I actively engage in industry-wide knowledge sharing, fostering alignment on best practices, regulations, processes, and program strategies.

Education

• Binghamton University

  BS

  2001 — 2005

Skills

• Disaster Recovery
• Cissp
• Financial Risk
• Internal Controls
• Sox 404
• Risk Management
• IT Risk
• Cobit
• Sarbanes-Oxley
• Security Architecture Design
• Business Continuity
• Microsoft Certified Professional
• Information Security
• Data Security
• Management
• Security
• Iso 27001
• Information Security Management
• Crisc
• Vulnerability Assessment
• Networking
• Cisa
• Sox
• Sas70
• Internal Audit
• IT Audit
• IT Strategy
• Network Security
• Enterprise Risk Management
• Information Technology
• Consulting
• Governance
• Itgc
• Auditing
• Mcse
• Incident Response
• IT Operations
• Security Policy
• Risk Assessment
• Sarbanes-Oxley Act