SUMMARY

• Technically skilled IT Security Professionalwith a consistent record of driving projects to successful completion. Recognized as architect of scalable and user - friendly greener technology platform dat supported rapid growth. Provide pragmatic leadership, excellent peer relations, disciplined budgeter and creative strategist.
• Core Competencies and Management Experience:
• IT\Cyber\Physical Security, Security Assurance, Asset Protection, IT Governance, Disaster Recovery; Business Continuity, Risk Assessments & Management; Business Intelligence, Green IT, Business Process Redesign, Budget, Strategic Planning, Organizational and Strategy Development, Leadership Decision Support and People, Product, Program, Procurement and Project Management.

TECHNICAL SKILLS

Security Tools\Software: WhiteHat, Qualys, Veracode, Mobile Iron, Netwrix, OpenDNS, Symantec Endpoint Protection, Tenable Security Center, Solar wind, Skybox, Zixmail, ADT Pulse, ACS Brivo, Penetration Testing, Vulnerability Scanning, OWASP ZAP, WPScan, W3AF, Kali tools, Burpsuite, NetSuite, ISO 27001, SSAE-16 SOC-1/2, HIPAA audit, Service Core, ServiceNow, Remedy, Heat, Visio, access cards, alarm system, CCTV, CIS CSC, Security Incidents, (BC/DR) exercises, NIST Framework, and Cisco Security Agent, RAS SecurID, Application Security, Wireless Security, Nagios, Nmap, Securina, Nessus, MBSA, Wireshark, Net Cat, Anti-Spam, Antivirus, Firewall, Anti Spyware, IDS/IPS, Proxy and Patch Management, GFI, KVM, Fluke and LAN Analyzer. Cloud Computing Office 365, Service Now, SharePoint, Email, Web Communications, and Timesheet. (Saas, PaaS, IaaS) Platform/OS/Networking Windows, Novell, Linux, BES Server, Wireless LANS/ Routers, Cable/DSL/DS3/T1/T3/TLS, Cisco Switches, Cisco Routers, VPN, Terminal Server, Cluster Server, Citrix, VMware, Firewall - Sonicwall/NetScreen/Checkpoint. Hardware Dell, HP and IBM server and MFP, VOIP, IP Camera, Electric Blackboard, Moving Message Board, Leak Detection. Handheld devices iPad, iPhone, Android, GPS, HP Jornada Handheld PC and Compaq IPAQ Pocket PCs, Blackberry.

Organizations: ISACA & (ISC)² NY Metro Chapter, InfraGard, Association for Computing Machinery, CompTIA Subject Matter Experts

Volunteer: Red Cross and Teh Governor's Office of Storm Recovery

PROFESSIONAL EXPERIENCE:

Independent Consultant

Confidential, New York

Responsibilities:

• Assisting companies with various Cybersecurity, Physical Security, projects, priorities, implementation and documentation.
• Plan, guide and execute security - related projects, such deploying new technologies, security service, solutions and products.
• Identify security gaps, vulnerabilities and weaknesses in systems, networks, physical and applications discover possible gaps.
• Conduct security risk assessments at teh enterprise, system levels and third-party inquiries into teh firm s security posture.
• Evaluate existing security controls and specifying of new controls & maintain a security risk register and track risk remediation.
• Assist /suggest improvements in security incident response activities and develop security awareness and training initiatives.
• Evaluated and establish security policies, standards, and procedures, guidelines and report and suggest improvements.

Confidential, NY, New York

Responsibilities:

• Responsible for all aspects of Global Security Operations including budgeting, purchasing, vendor negotiation, and management.
• Participated in strategy, security architected design, and implementation of key security initiatives within teh organization.
• Performed risk assessments, audit, assets, testing and implementing firm s business continuity and disaster recovery plans.
• Supported and operated central logging and alerting systems (SIEM Type), Penetration Testing, Vulnerability management
• process including operational security duties and tasks. (Identifying new vulnerabilities, research and analysis and response).
• In - depth penetration testing of external applications and discover possible gaps through use threat model, behavior analysis.
• Performed day-to-day physical and logical security systems tasks CCTV, access control, intrusion, and notifications as well as
• supported other departments with customer-driven security related inquiries and business with security questionnaires.
• Provided deep-dive application vulnerability assessment through a comprehensive testing process, identifying weaknesses.
• Participated in third party information risk assessment process improvement evaluate and Identify technology risks at third parties.
• Performed risk assessments using methodology; identify, document and communicate control deficiencies in business processes.
• Represented for vendor assessments, risks, controls, negotiation, and status of posture for current and new vendors.
• Prepared for and provided support for external and internal quarterly auditing and compliance programs (such as SSAE-16, ISO
• Established & enforced companywide Security Policy, Procedure, Standard and investigate document of Security Incident report.
• Oversaw teh development, deployment, and management of teh firm's cybersecurity technology and physical security controls.
• Presented regular security reports and guidance to executive management on teh state of teh firm's cybersecurity initiatives trends.
• Conducted research, recommend and evaluate new technologies, software, products, services, and procurement reduce cost efforts.
• Supported IT Ops groups with security guidance for systems and enhance corporate Information Security Training program.

Confidential

IT/Security Operations Manager Consultant

Responsibilities:

• Responsible for all aspects of IT Systems Security operations, developed, implemented, budgets, and monitored a strategic.
• Managed daily operations of IT Security, secure architecture and Risk, Business Continuity, Disaster Recovery, and Network.
• Conducted physical security assessment, gap analysis, vendor assessments, Mobile Security, and security awareness training.
• Performed risk assessments, audit, assets, facilities/psychical security, testing and implementing systems disaster recovery plans.
• Developed of Information Security Policy, Procedure, Standard, guidelines and report, notify and investigate of Security Incident.
• During Hurricane Sandy as precautionary measure to secure IT equipments and Backup Servers from flooded zone offices.
• Performed business impact analysis and recovery strategies/plan. Created DR plan and BC plan by utilizing Hot, and Warm sites.
• Took inventory of damaged IT equipments. Acted as emergency resource for multiple offices during and after storm.
• Managed IT purchasing equipment, application, vendor management and multiple projects with multiple field offices.
• Monitored/managed deployment of equipment s, warranty, inventory, service quality and reducing costs of day - to-day operations.
• Reengineered IT mobility, reducing cost by 50%, reducing printing cost by 30%, and reduced IT electricity cost by 20%.
• Conducted research, recommend and evaluate new technologies, products, services, and procurement and development efforts.
• Administered & managed vulnerability assessment and patch management on Windows Servers, Workstations and laptops.
• Administered physical card reader access\CCTV system, created end user accounts, permissions, and access rights perfect secure. Performed day-to-day / weekly maintenance of systems hardware, tape drives, and upgrade Firmware, Patches and Service Pack. Performed forensic analysis, Malware\SPAM analysis, OS hardening and managed Enterprise endpoint Anti-Virus management.
• Administered Novell GroupWise server, BlackBerry system to create new users permissions, and access rights, device security.
• Created app packages via Wise Package Studio 4.5, test and deploy software packages/upgrade using LanDesk Management.

Confidential, New York

System Engineer

Responsibilities:

• Network/Security Operations Center Supervisor (Working hours Weekends Fri, Sat, Sun) 1 Battery Park Plaza, New York
• Responsible for every aspect of day - to-day operations of teh Firm s global network, data center, and local area network infrastructure.
• Operated, and observed IT systems, Proxy, Firewall, IDS/IPS, spam, monitoring tools, networks, data centers, servers, OSs,
• applications, Blackberry, web, hardware equipment, physical security\CCTV system AC Temp, UPC to ensure operation.
• Performed day-to-day / weekly maintenance of systems hardware, tape drives, and upgrade Firmware, Patches and Service Pack.
• Worked with on-call staff/management, vendors, or other appropriate contacts to resolve teh situation as quickly as possible.
• Communicated production problems, Ensure daily check off lists and turnover logs, daily Service and Status reports next shifts.
• Performed system backups and recovery. Ensure tape management is followed onsite and offsite, daily, weekly, and monthly.