Joe Brennan

About Joe Brennan

A highly accomplished and results-oriented Fraud and Security Executive, with multifaceted experience in Project Management, Risk Management, Regulatory Compliance, Process Improvement & Automation, and Strategic Planning. A proven track record of developing and managing enterprise programs to implement compliance requirements, as well as analyzing payment transaction fraud to develop loss-remediation plans. A forward-thinking leader, who leverages exemplary organizational and communication skills to provide sustainable solutions that minimize a company’s financial risk and maximize security and compliance. Experienced in developing and running the following Compliance Programs: Information Security and Privacy GLBA | CCPA | FFIEC Authentication and Access (2021)| FFIEC CAT Health Information Security HIPAA | HITECH | ENHAC Fraud Identification and Remediation FACTA Red Flags Rule | Financial Exploitation of Vulnerable Adults (FEEVA) International Regulations EU GDPR | People’s Republic of China (PRC) Cybersecurity Law | PIPEDA -OSFI Cybersecurity Self Assessment Standards Compliance PCI-DSS | SWIFT | FRB Operating Circular Five

Experience

1. Senior Vice President Fraud and Security Compliance

   PNC

   Nov 2017 — Present · Pittsburgh, PA, US

   Provided leadership which communicated operational and regulatory risk to business to influence potential remediation actions. Analyzed all new regulations and standards which may have impacted privacy and security to identify requirements and potential gaps between current state of process, risk, and controls, and those now required. Developed and managed enterprise programs and projects across multiple business units to implement compliance requirements. Performed analysis of payment transaction fraud to identify trends and develop loss remediation plans. Developed risk management policy and guidelines based on business requirements, which improved security while minimizing customer friction.\\\\n\\\\n• Responsible for establishing and maintaining all privacy and security regulatory compliance programs including but not limited to: GLBA, HIPAA, CCPA, FACTA Red Flags Rule, EU GDPR, SWIFT Control Self Assessment, PIPEDA-OSFI Control Self Assessment, FFIEC Authentication and Access (2021) and BPA\\\\n• Provided leadership which effectively communicated the operational and regulatory risk to the business to influence potential remediation actions\\\\n• Performed analysis of all new regulations and standards which may impact privacy and security to identify the requirements and potential gaps between the current state of process, risk and controls and those now required\\\\n• Developed and managed the enterprise programs/projects across multiple business units to implement the compliance requirements. Collaborated with Enterprise Technology to develop authentication and access solutions which support Digital Identity (NIST SP800-63)\\\\n• Collaborated with the Lines of Business to support development of a PCI-DSS compliance network (Credit and Debit Cards)\\\\n• Directed staff and initiatives that support Risk and control management programs, to include governance support, Risk oversight, Risk infrastructure development, Risk identification, quantification, aggregation, and emerging Risks\\\\n \\\\n\\\\n \\\\n \\\\n\\\\n \\\\n

Education

• University of Missouri-Saint Louis

  Master of Business Administration - MBA, Business with emphasis in Information Systems