Experiences at Manager, Information Protection - PHH Mortgage

referral from a wife of a friend who worked there for years

I had a friend who worked at the company who tried for years to get me to apply. I finally did....

In security, the toughest problem is always the trade-off between security and availability. The battle is waged everyday.....

As one of the largest private label Mortgage companies, we have to serve many masters. Those master are some of country's largest and most prominent banks and investment companies.

In my current role as Manager within the Information Protection team at PHH Mortgage, I have the primary responsibility for managing compliance activities within Information Protection, supplementing what our Internal Audit team does. I am the focal point for all security policy creation, revision and dissemination. As a corollary, I am also responsible for the promotion and awareness campaigns that make the policies known throughout the organization. This year I developed and deployed a Privacy and Security course curriculum to begin providing formal refresher training sessions to our employees in compliance with Gramm-Leach-Bliley Act.

As Manager, I am the coordinator for all externally focused audits and due diligence activities for Information Protection ensuring that we are giving proper response to our clients as well as pursuing risk assessment and due diligence activities with our new or potential vendor partners domestically and worldwide. A key accomplishment of mine recently was my successful completion of our 2006 SAS-70 engagement for PHH, for which I was the lead.

A newly expanded role I have taken on gives me involvement with ongoing evaluations of business risk and fraud. I am now the IT conduit to the Legal department and other business areas to coordinate assistance for fraud prevention, detection and investigation efforts. To that end, earlier this year, I was co- founded the PHH Risk Council to begin addressing enterprise risk management activities in a coordinated and formal manner going forward. I am currently acting-chair of the Council in its inaugural year.

Rather than a specialist or even a generalist, I consider myself a 'versatilist' who is able to synthesis both business and technical knowledge and context and then use that information to generate business value....