John Yacko

About John Yacko

Professional with many successful years in leadership positions in financial services…

Experience

1. VP, Independent Technology Risk Advisor Sr

   PNC

   Feb 2021 — Present

   Provide subject matter expertise as second line of defense in Information Security Technology risk domain. Evaluate 1 LOD risk assessments, RCSA risk events and controls, Policies and Procedures, new technology controls and enterprise architecture committee materials. Participate in Technology Review Board as part of application change processing. Represent 2LOD Info Sec domain as member of Technical Review Board, Technology Standards SubCommittee, Technology Emerging Risks Working Group. Coordinate risk assessment of information system security controls including data center, cloud, and third party hosted systems. Provide quarterly information security risk report content for executive and Board consumption. Accomplishments:>Lead 2LOD Information Security review of cloud risk and controls >Spearheaded 2LOD BBVA integration information security risk assessment >Established annual executive and board level risk appetite metrics for info sec domain.>Evaluated Information Security and Technology Prime processes for 2LOD resulting in decreasing risk with corresponding increase in Quality of Risk Management rating.

Skills

• IT Operations
• Information Systems
• Pci Dss
• Cissp
• Byod
• Program Management
• Microsoft Office
• IT Management
• Process Improvement
• Cloud Computing
• Iso 27001
• Hipaa
• Nist 800-53
• Risk Assessment
• Pci Standards
• IT Grc
• Strategy
• Strategic Planning
• Enterprise Software
• Information Security Management
• Computer Security
• Telecommunications Management
• Networking
• Data Center
• Customer Service
• Remediation
• Sarbanes-Oxley Act
• Nist
• Enterprise Architecture
• Leadership
• Business Analysis
• Security
• Analysis
• Team Building
• Change Management
• Information Security
• Project Management
• Budgets
• Software Documentation
• Risk Management