Fan Wang

I am a senior information security manager (ISM) in firm’s Cybersecurity & Technology Controls (CTC) organization leading a team of 5 ISMs responsible for managing the technology, operational and regulatory risks within the Merchant Services line of business of CIB with over 160 applications that process over $1 trillion dollars of transactions annually.

What makes you a Risky Woman?

My number one priority is to enable the business by keeping the firm and our client’s data safe, stable and resilient. We work cohesively with other CTC and CIB control functions, including but not limited to software developers, business control managers, compliance, internal audit & external regulators.

Name your top 3 achievements

1. Showed a dramatic inherent risk reduction and control improvement across MS CORE portfolio: 34% break reduction with 95% closure rate, considerably higher than the 80% firm-wide threshold. 99% reduction in Severe (V1/W1) and Critical (/W2) vulnerabilities, 95% reduction in managed infrastructure vulnerabilities, 75% reduction in ACPI Tier 1 applications and 90% reduction of perpetual risk Allows.
2. Spearheaded multiple key risk and control programs and initiatives in Merchant Service including: Get To Moderate MyAccess and App2App accounts onboarding to AIM; GLBA compliance uplift; Product Council reviews; Verum and RSAM control gap workstream; TLM CDA workstream; Data protection control gap review and remediation; Multi-factor authentication control gap review; MS CORE issue and action plan review and remediations; email security control gap review and remediation; Infrastructure vulnerability remediation governance and process with production management and GTI, etc.
3. Managed and supported 3 key external audits (PCI, SOX and Soc1) and 9 internal business/technology audits – all completed with fair or satisfactory rating.

What is the biggest risk you’ve taken in your career?

Top performer with 23 years tenure in JPMC in progressively senior leadership positions across multiple LOBs and teams with both Bachelor and Master’s degrees.

What’s something most people don’t know about you?

Managed portfolios are mixed with legacy, complex platforms and modern technologies including: mobile, stratus (the only OS in the entire firm), web apps, DASS ( data as a service) app; mid/mainframe apps such as Tandem.

What is the best quality for successful leaders in Risk?

TBC