Grace Zhou, CISSP, CISA, CPA, MBA

IT Compliance and Risk Leader/Ensuring Robust Information Security/Financial Services

Greater Chicago Area

About

A seasoned finance, technology, governance and audit professional with extensive experience in financial services and public accounting. Held various roles in governance, compliance, quality assurance, and financial/operational/IT audit. Identify process improvements that add business value to an organization and implement solutions that enhance control and governance environments. Specialties: data analytics, process improvement, risk assessment, financial audit, operational audit, compliance audit, IT audit, application and system IT control review, configuration review, budget, capital reserve cash projection, financial analysis, project management, continuous auditing, process flow design and automation, quality assurance review, system implementation, regulatory (CFTC, SEC), fluent in Mandarin and Cantonese.

Experience

  • VP, Principal of Cyber Security IT Risk Management at Northern Trust
    Jan 2025 - Present · 1 yr 7 mos

  • IT/IS Risk, Regulatory and Corporate Governance Advisor at Russell & Associates
    Aug 2024 - Dec 2024 · 5 mos

  • Federal Reserve Bank of Chicago (6 yrs 1 mo)
    • Lead Risk Management Specialist
      May 2022 - Jan 2024 · 1 yr 9 mos

    • Senior Risk Management Specialist - Cyber Team
      May 2020 - Apr 2022 · 2 yrs

    • Senior CRSB Examiner
      Jan 2018 - Jun 2020 · 2 yrs 6 mos

  • Senior IS Auditor at Rotary International
    2014 - Jan 2018 · 4 yrs 1 mo

  • Senior Internal Auditor at CME Group
    2005 - 2013 · 8 yrs

    Promoted to Manager in 2007, promoted to Lead QA and Process Management in 2011