Twiggy Smith

 Enhanced and refined security controls, ensuring adherence to industry standards and regulatory
requirements.
 Developed and implemented technology rules, fostering compliance and smooth operations across the
organization.
 Managed exceptions to technology rules, maintaining proper documentation and obtaining necessary
approvals.
 Communicated regularly with stakeholders, clarifying responsibilities and promoting accountability for
compliance.
 Contributed to the development and maintenance of IT policies and standards, aligning with legal and
regulatory frameworks.
.

 Conducted security assessments and audits to identify vulnerabilities and recommend remedial actions.
 Developed and implemented security policies and procedures to safeguard company systems and data.
 Monitored and investigated security incidents, ensuring timely resolution and implementing preventive
measures.
 Collaborated with cross-functional teams to perform risk assessments and implement appropriate
controls.
 Assisted in the evaluation and selection of security technologies and solutions to enhance the overall
security posture.
 Conducted security awareness training sessions for employees, promoting a culture of security
awareness.
 Assisted in regulatory compliance efforts, ensuring adherence to relevant industry standards and
regulations.

Conducted in-depth risk assessments of third-party vendors, evaluating their financial stability,
information security practices, regulatory compliance, and business continuity plans.
Developed and implemented risk mitigation strategies to address identified vulnerabilities and gaps in
vendor relationships.
Collaborated closely with cross-functional teams, including Legal, Procurement, and IT, to ensure
compliance with internal policies and industry regulations.
Reviewed and negotiated contracts with vendors, incorporating appropriate risk provisions and
ensuring alignment with company standards.
Monitored vendor performance and conducted periodic audits to assess ongoing compliance with
contractual obligations and risk management frameworks.