Cyber Security, Information Technology, Risk Management Consultant Resume

SUMMARY:

IT Risk Management, Regulatory Compliance and internal /external audit, IT and Cyber Security, Digital Forensics Specialist, Third Party and Consulting Risk Manager with experience in audit and information technology, advanced risk management frameworks, assurance of regulatory compliance, security and operational resilience.
Driven to implement strategic initiatives with best in class industry standards while increasing share - holder value. Bi-lingual (Spanish and English.
Recognized for exceptional project management, communication skills, and consistently exceeding expectations.
Specializing in the Financial Services industry (banking) and health industry.
Expert in articulating the dynamics of computer crimes to include, but not limited to, computer intrusion, threatening emails, misuses of government funds, theft of trade secrets, racketeering, and identity theft.

SUBJECT MATTER EXPERTISE AND SKILLS:

Cybersecurity Governance Internal Control ISO27001 PCI PII GDPR HIPAA SOX NIST Cloud InfoSec PM Supervision & Regulation Letters Gap Analysis Vulnerability Scanning PEN Testing & Incident Response Threat & Vulnerability Supporting Messaging Exchange, Proofpoint, Sophos FTK/Access Data Fluid in PC and Mac platforms Knowledge of current security threats, techniques, and landscape Security Detection and Analysis Planning and Project Management

PROFESSIONAL EXPERIENCE:

Confidential

Cyber Security, Information Technology, Risk Management Consultant

Responsibilities:

Managed gap analysis process, ensured client audit issues were responded to in a timely manner, assessed and independently validated DFAST and CCAR models, and collaborated with
Executives to and applicable business process owners to ensure responses were accurate and properly described.
Reviewed vendor governance strategy and risk monitoring process to ensure a streamlined approach for fulfilling internal and client standards of compliance.
Advised business process owners of process requirements, responsibilities, potential risks, and their oversight responsibilities in relation to the vendor as it relates to client requirements.
Assessed internal compliance policies and procedures and utilized tools and templates to facilitate efficiency and accuracy in client audit responses, ensuring alignment with client policies.
Resolved significant audit issues, strategized significant projects, regulatory examinations, impact analysis of new and existing regulations.

Confidential

IS Compliance Analyst

Responsibilities:

Ensured the effectiveness of existing procedures and policies and to detect changes and report on their impacts to the information security program.
Assisted in the evaluation, development, maintenance and implementation of security standards, policies and procedures, compliance documentation and guidelines for multiple platforms and diverse systems.
Plan, prevent, minimize or recover quickly from cyber-attacks and other serious events and to ensure compliance with regulatory requirements.
Led a cross functional team in the development of policies, processes and procedures required to support the response to crisis management and support business continuity plans.
Knowledge of vulnerability scanning, network protocols and troubleshooting using Qualys.
Manage the vulnerability Scanning program and perform vulnerability assessments to identify weaknesses and assess the effectiveness of existing controls using Q-Radar, Invincea, Splunk, Fire-eye, and Snort.

Confidential

Compliance Officer

Responsibilities:

Conducted interviews, trained and managed new-hire, collaborated with upper management on data governance principles while implementing new security policies.
Arranged for risks that could seriously impact IT services.
Performed minimizing precautions for disaster situations by reducing the risk to an acceptable level.
Planned for the recovery of IT services in disaster cases.
Managed, maintained, and revised policies and procedures for the general operation of the compliance program and its related activities to prevent illegal, unethical or improper conduct.
Responded to alleged violations of rules, regulations, policies, procedures and standards of conduct by evaluating or recommending the initiation of investigative procedures.
Developed and oversaw a system of new methods for uniform handling of such violations.

We provide IT Staff Augmentation Services!

We'd love your feedback!

Resume Categories

Client Services

Job Seekers

Visa Sponsorship