Joy Curry

Background

About Joy Curry

As an experienced IT Risk, Security, and Controls Leader, I specialize in aligning cybersecurity strategies with business objectives, mitigating enterprise risk, and driving operational efficiency. With over 15 years of experience across global enterprises and regulated financial institutions, I have built and led programs that protect critical assets while ensuring compliance and operational resilience.I have led the transformation of security operations, establishing global cybersecurity programs that safeguard large-scale ERP environments, applications, and databases. Throughout my career, I have reduced vulnerabilities, strengthened security postures, and aligned risk management initiatives with broader strategic goals. I have managed multi-million-dollar budgets, scaled high-performing teams, and implemented cost-effective solutions that measurably enhance control maturity and business continuity.My expertise spans comprehensive IT governance and risk domains, including application and ERP security, Identity & Access Management, business continuity and disaster recovery, IT service management (Change, Incident, Problem, and Service Request Management), security awareness and training, third-party risk management, and enterprise risk assessment. I have led Business Impact Analyses, disaster recovery testing, phishing and social engineering simulations, and developed IT risk matrices, executive scorecards, and policy frameworks that strengthen audit readiness and defensible controls.I bring deep experience across regulatory and industry frameworks including NIST, ISO 27001/27002, GDPR, HIPAA, SOC 2, CIS Controls, COBIT, ITIL, FFIEC, GLBA, PCI-DSS, SOX, and OCC guidance. I excel at translating complex regulatory requirements into practical, sustainable control environments that balance security rigor with business agility.A core strength of mine is building and leading cross-functional teams through mentorship, collaboration, and strategic clarity. By fostering a culture of accountability and continuous improvement, I consistently deliver measurable results across complex security and compliance initiatives.I am driven by solving challenging risk problems, building scalable governance frameworks, and ensuring organizations are prepared for an evolving and increasingly regulated cybersecurity landscape. If you’re seeking a leader who can bridge enterprise security strategy with regulator-ready execution, I welcome the opportunity to connect.