Monica Gaffney

About Monica Gaffney

Highly qualified and experienced Risk and Compliance Senior Director with over 20 years at Senior Management level supporting Regulatory Compliance. Regulatory Controls managed include Privacy, SOX, PCI-DSS, and Payments. Led initiatives establishing corporate compliance programs such as ERM. Risk Management Regulatory Compliance Policy Management IT Vendor Contract Management IT Transformation Strategic Analysis Results Oriented Strong Leadership Excellent People, Communication and Presentation skillsMBA, Financial background

Experience

1. Senior Director, Global Corporate Compliance, Privacy and Data Regulations

   StockX

   Jun 2022 — Present · Detroit, MI, US

   Enterprise Risk Management (ERM): Established the ERM program based on roadmap; worked with C-Suite to define first set if risks for the program; worked cross functionally to define the Risk Management Committee; Lead quarterly ERM meetings; report to C-Suite on status; and build reports for Audit Committee.• BCP: Established the BCP program, work cross functionally to build out the BIA; identified critical business processes to develop BCPs; target 2023 to implement required drills; fed data to IT in support of Disaster Recovery process.• Partner with Procurement for third party vendor management; Partnered to define due diligence process; identified compliance requirements for vendor reviews; working implement an automated process to drive continued due diligence.• Training Program: Defined the required compliance training (Code of Conduct, Security, Data Privacy, Harassment, AML); partnered with training team to identify course content; manage the completion process, escalating as needed to drive completion across the organization.

Education

• Rochester Institute of Technology

  EMBA, MBA

  2007 — 2009

• SUNY Brockport

  Bachelor's Degree, Computer Science minor: Mathematics

  1983 — 1985

Skills

• Project Management
• Outsourcing
• Management
• Program Management
• Software Project Management
• Itil
• Sdlc
• Business Process
• Requirements Analysis
• Service Delivery
• Business Analysis
• Process Improvement
• Business Process Improvement
• IT Strategy
• Strategy
• Vendor Management
• Disaster Recovery
• IT Service Management
• Change Management
• Cross-Functional Team Leadership
• Integration