Trisha Peña

About Trisha Peña

With over seven years of experience in information security at BNY Mellon, I am a seasoned cybersecurity leader with expertise in incident management, forensics, and endpoint protection. I hold several industry certifications, including CISSP, CISM, and GCIH, and I am passionate about protecting the operations, reputation, and competitive advantage of BNY Mellon, its clients, and the financial sector from malicious cyber activity. As the Senior Vice President of Information Security - Cyber Resiliency and Response, I lead a regional team of professionals who provide timely and effective cyber incident response, investigation, and digital forensics services. I have successfully overseen the overhaul and upgrade of the corporate antivirus application, as well as the implementation and administration of various security products and tools, such as Symantec Endpoint Protection, Illumio Host-based Firewalls, Data Governance, Stealthbits StealthAudit, Tripwire, and Symantec Control Compliance Suite. I excel at working remotely with a globally diverse team, fostering relationships between technical and business teams, and managing special projects that require thoughtful analysis and strategic thinking.

Experience

1. Senior Vice President, Information Security - Cyber Resiliency and Response

   BNY

   Nov 2021 — Present · Nashville, TN, US

   ISD Incident Response protects the operations, reputation, and competitive advantage of BNY Mellon, its clients, business services, and the financial sector from malicious cyber activity through timely and effective cyber incident response, investigation, and digital forensics services. Provide full forensic analysis in accordance with accepted practices. Incident report investigation within SLA requirements. Timely escalation and triage of potential cybersecurity incidents. Effective incident containment and eradication. Timely communication of declared cybersecurity incident information to leadership and relevant stakeholders. Participation in market-wide client and other BNY Mellon internal exercises. Wide-ranging aspects of the position include: Investigation and triage of potential cybersecurity incidents. Containment and eradication of malicious cyber activity and associated attack vectors. Coordinated recovery of information assets and associated business services. Acquisition, analysis, and reporting of material found on digital media in support of investigations. Pre-deployed agents enable volatile memory analysis and forensic disk image analysis capabilities for workstations, laptops, servers, and mobile devices across numerous operating systems. Strict evidence handling procedures followed. Cybersecurity exercises stress-test incident response people, processes, and technologies in a controlled environment. Incorporate both technical and non-technical aspects of IR. Designed to deliberately identify potential issues that would inhibit a timely, effective incident response. Investigations in support of BNY Mellon Incident Reporting process. Incident reports classified as “cyber security incidents” are investigated for potential malicious activity by BNY Mellon employees and contractors. Investigation team supports legal, HR, corporate security, compliance and other services.