Gregory Drejza

Vice President Information Security @MUFG

Tempe, AZ, US

Performing evaluation, creation and updates to Information Security Risk Management strategies to meet company wide requirements.Performs Risks and Controls Self-Assessments for several Information Security teams: Security Incident Response, Data Loss Prevention, Data Encryption, Software and Systems Security, Technical System Standards, Endpoint Security, Infrastructure Vulnerability Scanning, Access Controls. Performs Issue Management activities with Information Security teams to create, remediate and close identified process or system gaps. This includes identifying applicable process risks and controls, establishing compensating controls and proving remediation sustainability via testing. Issue sources would include internal audit, second line-of-defense, management self-identified and federal regulators.Perform SOC 2 process, risk and control identification in partnership with external consultants to demonstrate low residual risk in MUFG IT environments.

Nova Southeastern University

BS, MS, Quality and Technology Management

Mohawk Valley Community College

AAS, Computer Science