Greg Bassett

Managed the deployment, support, and ongoing development of a custom pharmacovigilance surveillance system for a Fortune 50 company.

The system supported global regulatory compliance for a multi-billion dollar portfolio of drugs and products marketed in over 240 countries. The platform was used by drug safety staff in the USA, Belgium, England, and Australia.

At Vault Health, I worked on all client security inquiries, questionnaires, documentation, audits, and follow-ups. I was tasked with reviewing and responding to all RFP/RFI and contracts for security and compliance requirements. These typically were from large enterprise customers and state and county governments from across the US. In this role, I created a repository of assessments and responses; developed standardized SIG and HECVAT questionnaires; developed whitepaper and blog post content on the companies security and compliance program and developed processes for collaborating with the sales organization for self-serving this content for business development opportunities. These processes accelerated the sales closing process by several weeks, leading to explosive growth in revenue.

While at KPMG, I led my team through a complete overhaul and build-out of a SOC 1 and SOC 2 reporting service. We grew the function to support $1.5 billion of revenue, with 100% clean reports through several years worth of reports. The functional improvements included appropriate readiness assessment for new applications, clear descriptions and implementations of controls, and control alignment across the portfolio of applications and with internal audit and regulatory requirements (PCAOB, HIPAA, FedRAMP, CMMC, etc.). This function also closely collaborated with the client security inquiry team, ensuring an up-to-date status of SOC audits and remediation plans were published for consumption by the CSI organization.