As an auditor and consultant, Susan performs IT audit and regulatory reviews for financial institutions as well as assist institutions in preparing for and responding to a regulatory examination. Her expertise as an auditor and former examiner provides her the knowledge and expertise to assist de novo institutions in the vendor selection process, preparing policies and procedures, and instituting controls.
Susan also consults for numerous security providers and vendors helping them align products and services to meet institution regulatory mandates. She has over 18 years experience in the IT regulatory field and speaks regularly at risk management and security seminars and conferences and has authored numerous white papers on emerging information technology and security risk management topics.
Susan retains close relationships within the FFIEC agencies as well as industry trade groups to stay abreast on new technologies, best practices, and regulatory issues.
