Priscilla Wang

Data Protection Officer and Information Security Leader with 12+ years of global experience in governance, risk and compliance, privacy, cybersecurity, and AI governance. Experienced building programs from the ground up for global AI SaaS and insurance technology environments, aligning security and privacy programs with GDPR, CCPA/CPRA, SOC 1/2, ISO 27001, ISO 42001, NIST AI RMF, HIPAA, PDPA, and China Cybersecurity Law. Strong in policy lifecycle management, risk assessments, audits, vendor risk, incident response, privacy operations, and cross-functional leadership across APAC, Europe, Canada, and the Americas.

Adjunct Professor, Cybersecurity at COLLIN COLLEGE (2026-01 – Present)

• Teach workforce-oriented cybersecurity and information security concepts to students with varied technical and professional backgrounds.
• Develop and deliver curriculum spanning governance, risk management, privacy, compliance, security operations, and practical cybersecurity scenarios.
• Use case studies, hands-on activities, and industry examples to connect academic concepts with workplace expectations; mentor students entering or changing careers.

Data Protection Officer / Manager of Information Security at PATSNAP (2024-01 – 2026-01)

• Led global privacy and security strategy for an AI SaaS company supporting operations across APAC, Europe, the Americas, and Canada during IPO readiness.
• Built the AI governance framework and aligned security/privacy practices to GDPR, SOC 2, ISO 27001, and NIST AI RMF; supported ISO 42001 readiness and related assurance activities.
• Owned the GRC operating model, including policy lifecycle, risk register, control mapping, remediation tracking, vendor risk, audit evidence, executive reporting, and privacy workflows.
• Led DPIAs, DSAR operations, cross-border data governance, privacy-by-design reviews, incident response coordination, and regulatory readiness.
• Partnered with Engineering, Product, Legal, Sales, Finance, and executive leadership to translate regulatory and audit requirements into practical controls, procedures, training, and measurable remediation.
• Supported external audit and IPO assessment activity with EY across regions; helped strengthen customer assurance and commercial readiness.

Senior Information Security Lead, GRC at INSURITY (2020-01 – 2024-01)

• Directed the GRC program and security governance for a global insurance technology environment and supported audits across 12+ products.
• Owned policy and procedure lifecycle, enterprise risk assessments, control gap assessments, risk treatment plans, vendor risk reviews, and compliance reporting.
• Led and supported alignment to PCI, HIPAA, GDPR, CCPA/CPRA, NIST, and ISO-based security practices.
• Coordinated internal and external audit preparation, evidence collection, remediation tracking, and stakeholder communications.
• Worked across security, IT, engineering, product, legal, and business teams to improve control effectiveness and operational readiness.

Cyber Risk & Compliance Analyst at SHUTTERSTOCK (2019-01 – 2020-01)

• Managed IAM-related governance, corporate risk metrics, and CI/CD audit activities across multiple divisions.
• Supported security and compliance framework implementation, reporting, control reviews, and remediation activities.

Information Security Analyst at CONGA (2016-01 – 2019-01)

• Supported SIEM monitoring, security audits, incident-response activities, and security awareness initiatives.
• Partnered with business and technical teams on security controls, documentation, and operational support.

M.S. in Information Systems Security – University of Denver

M.A. in Public Policy Analysis – University of Denver

BBA – Capital University & University of California, Riverside