Information System Security Officer Resume

SUMMARY

Manage security projects integrating security best practices into business projects.
Manage the external Security Assessment
Maintain a relationship with External Audit
Wrote and maintain the IT Security Policies for the organization
Monitor and analyze new security vulnerabilities
Discover through tools, on - line research and industry reports
Analyze impact upon our Business Units
Develop and propose remediation approaches tailored to each Business Unit
Recommend and increase capability and functionality improvements in critical security tools and their associated processes
Perform security architecture reviews and provide feedback on proposed designs
Responsible for IT Security Education program
Perform Risk Analysis & Negotiation of Issues with the Business Units
Develop/purchase the tools necessary for the organization
Manage budget for all Cyber Security initiatives.

PROFESSIONAL EXPERIENCE

Confidential

Information System Security Officer

Responsibilities:

Manage consulting teams at multiple facilities.
Develop and implement IT Security review strategies in accordance with applicable standards and serve as an expert resource for improving the quality, quantity and effectiveness of internal reviews for our clients.
Responsible for PCI Audit response and mitigation activities ensuring the enterprises and our clients maintain the controls necessary to minimize risk and meet PCI requirements.
Manage the implantation and security of a PCI compliant new Parking Revenue Control System project.
Conduct feasibility study for new tools and techniques for a client IT Security group.
Consult on client Incident handling program improvements
Establish a client security metrics program which provides actionable data points for management decisions.
Team member for the client’s Incident Response Program.
Provide client guidance for the implementation of secure Web and Application development in accordance with OWASP guidelines, including recommending solutions for Web and Application scanning.

Confidential

Information System Security Officer

Responsibilities:

Use the DOJ’s Cyber Security Assessment and Management tool (CSAM) to manage POA&M issue and document remediation results.
Maintained the metrics program
Conduct the weekly status meetings where the CEN19 engineering teams report to me and I provided guidance on the current issues.
Develop and implement a Web Vulnerability scanning service using HP WebInspect and IBM AppScanner.