Jutta W

Principal for safeguarding user confidential data by building technology products to identify and remediate high-profile compliance issues. • Owned from concept to completion, to include internal product design and launch, the user-facing components of remediation for landmark $5B FTC privacy penalty. • Delivered actionable insights and recommended industry best practices for prioritizing, resolving, and overseeing all Facebook public claims and representations. • Managed AI Infrastructure delivery needs for a host of legal, privacy, regulatory, products (e.g. WhatsApp, Instagram, Facebook ads, marketplace, payments, newsfeeds, augmented reality/virtual reality AR/VR) and business machine learning (ML) modeling and prediction services.

Operationalized Google AI Health research and products by building and overseeing all regulatory compliance, data privacy, security, trust and assurance initiatives. • Served as patient and provider Ombudsman and delivered effective recommendations for optimizing data management, UX design features for healthcare related products for engineering and product leads. • Collaborated with subject matter experts, internal and external stakeholders—e.g. patient advisors, partners, regulatory agencies and thought leaders—for products development. • Achieved national and international privacy and security goals by creating, leading, and executing large-scale programs for highly regulated health care space. • Recruited, trained and inspired high-performing teams to reach program objectives. • Deployed ML to increase disease detection integrity/quality and clinical advancement. • Promoted data protection and patient safety at international conferences/industry forums. • Ensured development and delivery of high-quality products in compliance with defined standards by building and maintaining a Quality Management System (QMS). • Company representative at international conferences advocating for patient safety in AI. Elected as the inaugural Head of the US Delegation to ISO for AI standards (ISO/IEC JTC 1/SC 42). • Led a 25-company coalition of technical industry experts to pursue standards of AI foundational concepts, computational methods, trustworthiness, and use cases.

Elected the inaugural Chair of ANSI/INCITS Artificial Intelligence. This technical advisory group produces international (ISO) standards in the areas of Artificial Intelligence, Machine Learning, and Deep Learning and represents the United States on the new ISO JTC-1 SC 42 - Artificial Intelligence Sub Committee.

Managed an internal consulting group focused on information assurance and security engineering - proving your trust in Google products is well earned. Eng Compliance operates commercial attestations and assertions of compliance including a full Alphabet (pun intended) soup of industry standards and regulations: PCI, SOC, SOX, FedRAMP, ISO, FDA, HIPAA, MRC... and many others.

Delivered visionary leadership for compliance, information security, fraud waste and abuse, claims audit, and privacy programs for an Integrated Health Delivery Network (IDN). • Drove $85M revenue increase in billing reimbursement by recovering ½ star CMS rating. - Reconstituted compliance organization—hired and mentored leaders for five divisions. • Implemented Capability Maturity Model Integration (CMMI) to remediate operational process development discrepancies and to improve overall healthcare delivery productivity. • Spearheaded business resiliency efforts ensuring enterprise operations continuity. • Provided recurring Board of Director briefings and served as acting Chief Information Officer.

Oversaw end-to-end implementation of industry leading privacy program for an integrated health system with 23 hospitals, 185 clinics, ~6M patients and a ~500K member health plan. • Provided award-winning privacy protections to by leading and inspiring a team of 12 privacy professionals and 25 geographically dispersed privacy coordinators. • Established corporate policies/procedures, executed workforce training and education, oversaw enforcement and disciplinary actions and led HIPAA and HITECH security and privacy compliance components by implementing metrics and scorecard reports. • Delivered effective guidance and training to executives and IS leadership on Governance, Risk and Compliance (GRC) principles and IT requirements and controls frameworks. • Developed and enacted policies responsive to HHS Office for Civil Rights audit protocols. • With industry-leading partners, helped develop commercial compliance and privacy tools. • HIMSS committee member contributing to industry security and privacy policymaking. • Promoted health IT/privacy concepts to Federal and state legislators and White House Staff.

Applied and expanded Big-Four methodologies to deliver great security and privacy consulting work products across a variety of industries and for both small and large clients: • Lead a security risk assessment for a large State government benefit management application. • Authored ISO 27001-aligned Security Policy, Standards and Guidelines for State Government. • Developed security governance policies, Federal and State policy regulatory compliance plan, disaster recovery controls and data security architecture development for a State case management system proof of concept. • Performed a PCI readiness assessment for very large software development company. • Performed a Network Operating System Security Internal Audit for a Regional Bank. • Performed a Customer Information Security Risk Assessment in support of GLBA compliance for a Fortune 500 mercantile and financial services company.

Startup founder and CEO. CryptoLogon provided simple, secure and scalable identity management solutions for the financial services industry. Cool smart card technology embedded in a plug-n-play USB token with asynchronous crypto that was easily enabled on banking sites.

Provided secure authentication and identity management research and development support for the Federal Remote Forensics Computing Environment program. Developed curriculum and presented instructional materials for Public Key Infrastructure (PKI) and key management modules for Department of Defense (DoD) Security+ virtual training course.

Product lead and subject matter expert with the Department of the Army Identity Management (IDM) program for directory services and Public Key Infrastructure (PKI)-related IDM technologies.