Star Gutierrez

About Star Gutierrez

Cybersecurity & Technology Risk leader with 10+ years driving enterprise risk governance, regulatory compliance, and security assurance across financial services and tech. Expert in cyber risk strategy, TPRM, and board-level reporting, with a track record of scaling risk programs and enabling data-driven executive decisions.I’m focused on helping organizations make smarter, faster, risk-informed decisions in complex and highly regulated environments. Over the past 10+ years, I’ve built and led enterprise cyber risk, compliance, and security assurance programs across financial services and global technology companies. My work sits at the intersection of cyber risk strategy, executive reporting, and data-driven decision making—translating complex regulatory and technical requirements into clear, actionable insight for leadership and the board.I’ve led initiatives that:• Reduced third-party security assessment cycle time by 80%+ through automation and scalable assurance frameworks• Designed enterprise risk metrics aligned to risk appetite and regulatory obligations (FFIEC, SEC, GLBA, NIST, ISO 27001, SOX)• Built executive and board-level cyber risk dashboards that improve visibility into emerging threats and control effectiveness• Strengthened data governance and metric integrity across risk reporting pipelines using SQL, Tableau, and enterprise GRC platformsI’m known for building strong cross-functional partnerships across security, engineering, legal, audit, and data teams—and for elevating risk conversations from compliance-driven to business-driven.My focus areas include:• Enterprise Cyber Risk & Risk Appetite Frameworks• Technology Risk & 2nd Line Oversight• Third-Party Risk Management & Security Assurance• Control Effectiveness & Continuous Monitoring• Data-Driven Risk Analytics & Executive ReportingI’m actively engaged in the cybersecurity community as a former board member for the Austin ISACA chapter, active in multiple technology mentorship programs, and I’m currently pursuing CISM to further strengthen my leadership in enterprise cyber risk management.If you’re working on advancing cyber risk strategy, modernizing GRC, or improving executive risk visibility, I’m always open to connecting and exchanging ideas.

Experience

1. Sr Manager, Technology Risk Management Resilience and Technology Management

   Charles Schwab

   Jan 2023 — Present

   Enterprise Technology Oversight Leader: Provides second-line oversight of enterprise technology risk by ensuring risk metrics accurately measure exposure, align to the firm’s risk appetite and meet regulatory expectations across U.S. financial regulators, including FFIEC and FINRA.Regulatory & Risk Metrics Authority: Leads the design, execution, and continuous improvement of Technology risk metric frameworks and annual assessments (Metric Coverage Review, Sensitivity Analysis, Metric Integrity Review), translating complex regulatory requirements into clear, defensible executive and board-level reportingCross-Enterprise Risk Integrator: Acts as a strategic connector across Technology, Cybersecurity, Data Governance, Operational Resilience, AI Risk, Incident and Change Management teams, diving consistent risk measurement, effective challenge of first line activities, and reduction of duplication across disciplines.Data Integrity & Risk Transparency Champion: Ensures integrity, lineage and quality of risk data by leading Critical Data Elements (CDE) governance, metric data validation, and data lineage attestations- strengthening confidence in executive risk decisions and regulatory examinationsStrategic Advisor to Discipline Teams: Partners across enterprise first line of defense teams to identify emerging technology and AI risks, surface material gaps, and influence risk-informed decision-making through clear narratives, actionable insights, and forward-looking risk metrics.

Education

• University of Phoenix

  Bachelor of Management, Project Management

  2012 — 2014

• University of Texas at Brownsville

  Associate of Science (AS), Business Administration and Management, General

Skills

• Project Management
• Customer Service
• Strategy
• Hipaa
• Data Analysis
• Epic Systems
• Emr
• Software Documentation
• Program Management
• Statistical Data Analysis
• Management
• Team Building
• Medical Terminology
• Hospitals
• Business Analysis
• Microsoft Office
• Health Insurance
• Managed Care
• Risk Management
• Healthcare Consulting
• Revenue Cycle
• Quality Improvement
• Microsoft Powerpoint
• IT Compliance
• Internal Audit
• Training
• Leadership
• Healthcare Information Technology
• Healthcare
• Microsoft Word
• Team Leadership
• Healthcare Industry
• Vendor Management
• Regulatory Compliance
• Process Improvement
• Soc Compliance
• Medical Billing
• Healthcare Management
• Strategic Planning
• Medical Devices