Brenda Paula Resume

Security & IAM Domain Advisor

Brenda Paula

I translate complex regulatory obligations into executive risk narratives and scalable security controls.

Brenda Paula, head and shoulders, outdoors in a garden
Download resume LinkedIn

Summary

7+ years of identity governance and security compliance.

I scale governance frameworks, evaluate technical infrastructure and drive risk management. I lead Second Line of Defense advisory, run AI-first compliance workflows and automate identity lifecycles.

  • Hedge fund
  • Investment banking
  • Digital assets

Numbers

Results I can measure.

~67%

smaller compliance exceptions backlog

Coinbase
80%

faster onboarding and offboarding provisioning

Point72
76%

faster request turnaround, from 2.04 to 0.495 days

Jefferies
200+

weekly service tickets inside sub-2-day SLAs

Point72

Experience

Experience

Coinbase

Domain Advisor, Information Security Compliance

October 2025 – Present

  • I lead Second Line of Defense advisory for the enterprise IAM domain, with AI-first workflows for system scoping, policy-to-control mapping and control gap assessments.
  • I cut the compliance exceptions backlog by ~67% with a new workforce categorization standard and recalibrated access policies.
  • I directed a cross-functional initiative across IAM Governance, Data AI Security, Data Platform and Privacy to close visibility gaps in PII data access.

Point72

Information Security Associate

March 2022 – September 2025

  • I directed global Identity Governance and Administration lifecycle operations, aligned to NIST, SOC 2, GDPR and ISO 27001.
  • I drove the firm-wide integration of Azure Entra ID with One Identity Active Roles.
  • I engineered RBAC models in SailPoint that cut onboarding and offboarding provisioning times by 80%.

Jefferies

Information Security Analyst

March 2019 – March 2022

  • I administered identity lifecycle governance and access controls across mission-critical financial systems.
  • I designed and deployed automated provisioning workflows, cutting average request turnaround by 76%.
  • I managed annual user access certifications and wrote the application runbooks.

Skills

What I work with.

Security & Governance

2LoD Advisory, IT Risk & Compliance, Identity Governance & Administration, Control Design & Gap Assessments, Inherent/Residual Risk Quantification, Policy Architecture, Audit Readiness, Archer, Regology

IAM & Infrastructure

Identity and Access Management, Role-Based Access Control, Privileged Access Management, SailPoint, Okta, Active Directory, Azure Entra ID, One Identity Active Roles, Cloud Controls (AWS), Technical Design Reviews

AI, Data & Automation

AI-First Workflow Design, LLM Agents (Claude Code, Codex, in-house tools), AI-Assisted Audit Analysis, Data AI Security & Privacy Governance, PII Access Controls, SQL, Snowflake, Dashboards (Splunk, Microsoft, Google), Process Automation

Strategy & Advisory

Executive Risk Posture Analysis, Cross-Functional Stakeholder Engagement, Program Maturity Scaling, Technical Writing

AI, Data & Automation

From data to action.

I build dashboards that teams use to take real action. These skills are a key part of my Second Line of Defense work: system scoping, policy-to-control mapping and control gap assessments.

  1. DataSQL, Snowflake
  2. AutomateAI-first workflows, LLM agents
  3. DashboardSplunk, Microsoft, Google and other platforms
  4. ActionThe team decides and acts

This site was built using those same skills.

Frameworks

Audit readiness, six ways.

Each links to the publisher’s own page.

Education

The Pennsylvania State University

B.S. in Science, Biological Sciences and Health Professions

University Park, PA

Contact

Let’s talk.

Reach me by email or on LinkedIn.

Brenda Paula smiling in front of a harbour lined with colourful houses
Out of office
Emailbrenda@brendapaula.com LinkedInin/brendacpaula Download resumePDF

© 2026 Brenda Paula