Nancy Heath

About Nancy Heath

My name is Nancy Metz Heath and I help companies keep going when all hell breaks loose. Hurricanes, pandemic incidents, cyberattacks, bomb threats, flooding, workplace violence— my company is always prepared.As a Master Certified Business Continuity Planner and Certified Information System Security Professional, I have assessed and mitigated risks facing companies in multiple industries including healthcare, energy, financial and information services. My background in information technology, accounting and operations gives me a comprehensive understanding of critical business processes, allowing me to ask insightful questions while assessing business risks. I guide leadership teams through tabletop exercises to be sure that when things go wrong, everyone knows and has practiced the plan, creating a sense of confidence that translates into successfully managed incidents. Business Continuity Business Impact Analysis Tabletop exercises Pandemic and infectious disease planning Business continuity plan development Crisis Management Emergency Communications Incident Management Technology Risk Program RSA Archer Business Continuity PlanningCyber Incident Response Disaster Recovery program Cyber risk assessment Incident responseVendor Management & other skills Global vendor risk assessment Third party Risk Negotiations Policy and Standards Kaizen Process Improvement Outsource Management Board-Level Communications Nancy Metz Heath, MBCP, C••••••••@gmail.com

Experience

1. Lob Risk Expert

   PNC

   Oct 2024 — Present

Education

• Nova Southeastern University

  Master of Business Administration (M.B.A.), Business Administration and Management, General

  1986 — 1989

• Youngstown State University

  Bachelor of Science, Business Management/Accounting

  1980 — 1983

• Western Governors University

  Master’s Degree, Information Security & Assurance

  2014 — 2016

• Southern Methodist University

  Advanced Graduate Certification, Dispute Resolution

  2002 — 2004

Skills

• Information Technology
• Business Continuity
• Program Management
• IT Strategy
• Disaster Recovery
• Project Management
• IT Management
• Project Portfolio Management
• Relationship Management
• Outsourcing
• Process Improvement
• Cyber Security Incident Response
• Business Analysis
• Business Impact Analysis
• Business Continuity Planning
• Information Technology Risk
• Project Planning
• IT Risk Management
• Cyber-Security
• Governance
• Business Process Improvement
• Vendor Management
• Incident Management