Information Security Professional Resourceful manager, analyst and engineer with diverse information security knowledge and effective communications skills. Well-rounded business skills and technology acumen. Possess broad technical aptitude and over twenty years of information technology experience. These qualifications combined with my conscientious attitude and results oriented approach make me a valued contributor. Profile:
- Certified Information Systems Security Professional (CISSP)
- Certified Information Systems Auditor (CISA)
- Experience designing and implementing information security solutions and standards.
- Ten years auditing, compliance and risk assessment practices experience.
- Perform risk assessments, policy / documentation reviews, remediation plans applying standards.
- Direct experience recommending policies, procedure and internal controls.
- Knowledge of CoBiT framework and practices to align IT with business objectives.
- Practical experience implementing security standards, including ISO, NIST & DISA STIG’s.
- Regulatory compliance experience, including SOX, GLBA, PCI DSS, FFIEC and HIPAA.
- Analysis skills performing and evaluating Service Organization Control (SOC) reports (SSAE 18).
- Supervisory experience managing small teams of five to eight engineers and professionals.
- Five years vendor management experience to ensure effective operations and engagements.
- Proven project management experience and drive to consistently meet deadlines and budgets.
- Strong collaboration, team building, liaison, leadership and customer service skills.
- Ability to instill unifying vision into teams with diverse objects to ensure mutually beneficial results.
- Analytical abilities using applications to prepare and present data to support decisions.
- Resourceful and proficient use of MS Office including Word, Excel, Visio and Project.
- Hands on expertise with server operating systems (Win, Linux, UNIX) and databases.
- Other technology certifications and training including MCSE, CCNA, Venafi and GPEN training.