Resume

Resume Details
B. T.
Location	Summerfield, NC
Contact	Click to View Contact
Source	Direct Candidate
Salary	N.A.
Rate	N.A.
Resume

INFORMATION SECURITY MANAGEMENT 
Enterprise Governance, Risk and Compliance

SUMMARY
Fifteen years experience as a certified technology professional with a combination of business acumen and technical expertise. Works on multimillion-dollar information security industry integration initiatives and developing technological strategies that support corporate objectives. 

Leads information security teams in multiple industries to improve security through building and implementing methodologies and frameworks that balance information protection and business agility. Drives bottom-line competitive position by optimizing security investments, avoiding losses from security incidents, improving customer retention, enhancing business decision-making, and reducing corporate risk and liability.

Gains cost reductions by restructuring and revitalizing service groups and introducing innovative service solutions. Establishes frameworks and processes to accommodate substantial growth in compliance-based environments. Solid understanding of information security compliance standards and best practices including CoBIT, ITIL, HIPPA, ISO 2700x and OCTAVE.

Promotes a corporate culture of information security through strategic planning and implementation of required standards, processes and protocols to incorporate IS into business practices.

Core Competencies:

Regulatory Compliance  Audit Management
Network, Host  Application Security
Firewalls, Gateways  Content
Business Impact Analysis  Risk Review
Security Event Monitoring (SEM-SIM-SIEM)
Security Incident Response
Key Security Models  Regulations
Mobile Device Security Programs
Data Loss Prevention (DLP)
Strategy  Solution Delivery
Global IT Delivery  Program Management 
EXPERIENCE
Mar 2009 - INFORMATION SECURITY CONSULTANT
PresentNetwork Resource Group, Greensboro, NC

Security firm assisting organizations with security initiatives to reduce vulnerabilities, fortify operational and network infrastructure security, and comply with an evolving regulatory environment.

Advise clients about Information Security.  Develops frameworks, implements identity and access management, ensures regulatory compliance and leads projects.  Active in the Information Security community and stays up-to-the-minute with the latest threats, technologies, solutions and trends. 

Major project was an engagement for a $1.3B financial provider with 6,000+ employees. As the acting Manager of Information Security, managed and maintained IS cost controls, risk, compliance and daily security operational procedures. Developed a three-year strategic plan and roadmap, creating a broad-based vision for Information Security.

 Held lead advisement role on InfoSec Steering Committee, building strong relationships with business sponsors in identifying business needs and developing strategic solutions to innovate business processes.

 Reduced compliance costs a forecasted 10% through tactical evaluation and replacement of current operational technology with more cost-effective solutions.

 Aligned business objectives of the enterprise by strategically ensuring that existing Payment Card Industry (PCI) compliance costs were captured and managed in budget that projects a 12% decrease. Conceived a technology infrastructure that would be PCI compliant without imposing upon the network of independent brokers.   

 Developed CSIRT strategy by writing Policy, creating customized processes and procedures, internal and external communication matrix, establishing SME Response Team and coordinating rehearsals.
  
 Established secure electronic file transfer process between client and client*s bank which allowed all financial information, including payroll files to be transmitted securely and verifiably. 
Feb 2006 - SR. INFORMATION SECURITY ANALYST 
Feb 2009VF Corporation, Greensboro, NC

$9B apparel supplier engaged in the design, manufacture and marketing of apparel in US and internationally. Brands include Wrangler, Lee, The North Face, Vans, JanSport, Kipling, Reef, NFL, MLB, Harley-Davidson, and Nautica.

Recruited to provide global technology compliance and risk management for over 55,000 employees. Developed and implemented compliance-based strategic plan for information-network security, threat and risk identification, mitigation-remediation planning strategy, policy definition, and compliance architecture. Acted as Global Information Security Manager and supervised a team of 15 information security outsourced technical staff. 

 Provided leadership in development, deployment, and management of technical enterprise security recommendations, solutions, and services, including encryption (whole-disk, email-file, PKI), endpoint security (antivirus, HIPS, PFW), network security (firewalls, intrusion prevention, web content filtering), threat-incident management (SEM-SIM-SIEM), access control-administration, and end-user ID Management (IDM-IDAM).
 Created global risk-based security policy and procedure initiative, aligning with company business strategy. Created Global Security Policy and Procedure Matrix-Roadmap, including foreign laws and regulatory requirements. Project initially saved $120K in outsourced spatial expenditures.

 Migrated risk by creating and deploying VF Global Risk Matrix and mapping entire portfolio of compliance-risk-reduction initiatives. 

 Developed Data Loss Prevention (DLP) program, protecting enterprise information assets.

 Enhanced communication between employees and Information Security group by developing a cost-effective Global Security Awareness Program, reducing security expenditures of non-malicious employee errors and omissions. 
Jul 2001 - INFORMATION SECURITY CONSULTANT
Feb 2006 Network Resource Group, Charlotte, NC

Performed compliance-based Information Security consulting and project management focusing on risk assessment, security analysis, and implementation.  Improved clients* competitiveness through forecasting of risk factors.  Generated and implemented Standards, Policies, and Procedures on secure enterprise information system optimization for senior executive management. Guided efforts of internal and vendor support staff in the enhancement, regulation, and application of secure information systems, policies, procedures, and complex critical issues. 

 As a Global Security Manager for a Fortune 25 technology provider, executed first international VPN project for a Fortune 100 financial institution. Project encompassed 32 sites in US, EU, and APAC. Structured Implementation Plan, Master Schedule, Key Milestones, and Project Status Reports.  Supervised six global Project Managers and 20 support staff.  Aligned project with goals of executive management at 3% under allotted budget.

 Prevented SEC-imposed monetary fines for a Fortune 100 energy company.  Served on Sarbanes-Oxley (SOX) global compliance team as Subject Matter Expert.  Guided assessment program preparation and test plan structure, coordination, execution and evaluation of internal controls. Refined IT compliance standards regarding networking, software development, access control and backup-recovery.

 Facilitated $2B Initial Public Offering for a well-known motorsports-based organization by ensuring compliance with Sarbanes-Oxley. Created risk management model incorporating framework, policies and procedures to drive completion.

Early Career:  

REGIONAL FIELD ENGINEER, Carrier Access Corporation

SENIOR NETWORK SECURITY ENGINEER, Qwest Communications International Inc. 

IMPLEMENTATION PROJECT MANAGER, ITC Deltacom Inc.

United States Army and Reserves 
EDUCATION  CERTIFICATIONS
University of Tennessee, Knoxville, TN
Activities: U.S. Army ROTC
Certifications
CISSP - Certified Information Systems Security Professional  
CSSLP - Certified Secure Software Lifecycle Professional  
ISSAP - Information Systems Security Architecture Professional  
CISM - Certified Information Systems Manager  
ISSMP - Information Systems Security Management Professional
<< Back
Resume

Similar Candidates
