Amy Bradley

About Amy Bradley

Information Security | Cloud Security | Application Security | Security Compliance | Security Testing | Security Planning | Security Breaches | Data Privacy | IT Security | Data Security | Cloud Security | Data Encryption | Incident Response | Cloud Controls Matrix | Control Self-Assessment | Identity & Access Management | Risk Assessments | Risk Management | Multifactor Authentication | Asset Management | Data Classification | Software Development Life Cycle | Systems Development Life Cycle | Vulnerability Assessments | Contingency Planning | Governance, Risk and Compliance | Zero Trust Architecture | Technical Team Leadership | Agile | Audit | Code Review | ITGC | ITAC | Scrum | Kanban | FedRAMP | FISMA | HIPAA | PCI DSS | NIST Cybersecurity Framework 2.0 | SOC2 | SOX | ISO 27001 | NYDFS | COBIT | COSO

Experience

1. Information Technology Security Analyst

   Tokio Marine Group

   Oct 2021 — Present

   Lead risk assessments and gap analyses across NIST CSF 2.0, NYDFS, and PCI DSS, ensuring alignment with regulatory and industry standards.• Strengthen organizational resilience by assessing vulnerabilities, threats, and risks, and partnering with Security Engineers and Architects to design and execute mitigation strategies against cyberattacks.• Deliver executive-level reporting through monthly metrics for the IT Steering Committee, highlighting penetration test findings, application security issues, and overall risk posture.• Develop standardized security documentation including policies, SOPs, and quick reference guides, improving efficiency and consistency across the enterprise.• Define accountability by identifying risk owners, application owners, and control owners, and improve governance through classification, sensitivity labeling, and third-party risk assessments.• Enhance compliance oversight by documenting audit and control self-assessment findings and maintaining an accurate, up-to-date Risk Register in OneTrust.• Collaborate with Project Management teams to perform control self-assessments, improving visibility into operational, project, and strategic risks across business units.• Verify security controls for systems and applications, ensuring optimal security posture and compliance with internal and external requirements.• Streamline remediation efforts by creating and assigning ServiceNow tasks for audit and penetration test findings, driving timely resolution.

Education

• Western Governors University

  Master of Science - MS, Cybersecurity and Information Assurance

• Shaw University

  Bachelor of Science - BS, Business Administration and Management, General