Suggestions
John Novak
Senior Associate - Cybersecurity & Privacy at PwC
Professional Background
John Novak is a distinguished Senior Associate within PwC's renowned Cybersecurity and Privacy practice. His professional journey has centered primarily around the financial services sector, where he has amassed extensive experience in technology and cyber risk management. John has proven adept at developing and implementing robust risk management functions, ensuring that clients navigate the complexities of technology processes with confidence and precision. His role encompasses a range of responsibilities, including conducting host-based network segmentation for Payment Card Industry (PCI) scope reduction, managing cybersecurity programs in accordance with Federal Financial Institutions Examination Council (FFIEC) remediation guidelines, and developing standard operating procedures across various domains such as Business Continuity Planning (BCP), Disaster Recovery (DR), Third-Party Risk Management (TPRM), and Asset Management. Additionally, John is involved in control testing and design as part of the Risk Control Self-Assessment (RCSA) process.
John began his career at PwC as an Advisory Intern, where he laid the groundwork for the impressive career trajectory he has since pursued. His dedication and skills quickly earned him a position as an Associate, where he further honed his expertise in cybersecurity and privacy issues. His work ethic and ability to deliver high-quality insights did not go unnoticed, leading him to his current role as a Senior Associate. John's climb in the ranks of this prestigious firm is a testament to his commitment and competence in his field, which continues to grow in importance across all sectors, particularly in financial services.
Education and Achievements
John's educational background is rooted in solid foundations in risk analysis and cybersecurity. He earned his Bachelor's degree in Security and Risk Analysis from Pennsylvania State University, where he achieved high distinction with an exceptional GPA of 3.85 out of 4.00. His studies provided him with a robust understanding of the complexities involved in security and risk management, equipping him with the theoretical and practical knowledge necessary for navigating the intricate landscape of cybersecurity. John’s pursuit of excellence during his educational journey underscores his commitment to understanding the nuances of risk management in technology.
Additionally, John completed his GED at Walsh Jesuit, which reflects his academic determination and resilience. His educational experiences have played a crucial role in shaping his approach to problem-solving and risk mitigation in his professional career.
Achievements
John Novak has made significant contributions to the evolving field of cybersecurity and risk management, particularly for clients in the financial services industry. Among his most notable achievements, John's work on host-based network segmentation for PCI scope reduction has directly impacted the way institutions safeguard customer data, enhancing their defensive posture against cyber threats. His leadership in developing cybersecurity program management initiatives has greatly assisted financial organizations in achieving operational compliance with federal guidelines and protecting sensitive information.
Moreover, John's dedication to developing standard operating procedures in key areas such as BCP, DR, TPRM, and Asset Management has streamlined processes within client organizations, leading to greater efficiency and effectiveness in risk management practices. His participation in control testing and design has also elevated the quality and rigor of risk assessments, providing clients with a clear understanding of their risk environment and facilitating informed decision-making.
John's commitment to professional excellence, his robust analytical capabilities, coupled with a nuanced understanding of technological processes, make him a valuable asset in the field of cybersecurity and privacy. His continuous learning mentality and proactive approach enable him to stay ahead of emerging risks, ensuring that his clients are not only compliant with current regulations but also prepared for future challenges.
