SUMMARY:

• IT RISK MANAGEMENT & INFORMATION SECURITY LEADERRegulatory/Sarbanes - Oxley Compliance IT Security Governance IT Audit Management
• Business Continuity Planning Disaster Recovery Planning Identity Access Management/Access Provisioning
• Intrusion Detection Systems Incident Management Shared Services Client Services Management/Consulting
• Award-Winning Change Agent Bringing People Together to Automate and Improve ProcessesReduce Costs, Secure Environments, and Ensure Policy and Regulatory Compliance
• IT Security professional with more than 10 years of success safeguarding information systems and data for various operating companies of $73B global manufacturer. 20+ year IT career includes systems analysis and systems development, IT audits, IT consolidation, decentralization, and relocation, shared services management, and information systems security analysis and operations. International business experiences span Latin America, Europe, and Asia. Blend of business/financial and risk management education provides unique understanding of business implications and cost/benefit of risk mitigation systems and controls. Routinely create new or reengineer existing functions that become foundation for maturing organizations.
• Achieved rapid relocation of Security Operations for Fortune 500 company, meeting Wall Street expectations.
• Implemented security/access systems saving many millions of dollars while increasing security/reducing risk.
• Restored IT Security/ HQ relationship by bringing team together to improve processes and deliver on commitments.
• Created Business Continuity Services function adopted as model for IT services provider for 7 operating companies.
• Played key role in laying foundation for consolidating operating companies into new IT shared services department.
• Consolidated 6 operating companies’ Disaster Recovery functions into one for $6MM in cost savings.

PROFESSIONAL EXPERIENCE:

Confidential, Richmond, VA

Manager Security Operations & Principal Security Technologist

Responsibilities:

• With headcount reduction and package buyouts on horizon, took opportunity to complement proven management skills with return to hands-on role in systems implementation, security assessment/requirements definition, and audit governance. Reporting to Manager of Security Operations & Programs, oversaw 9 personnel in these functions as well as major operations relocation effort.
• Enabled company to meet Market commitment with execution of 5 th information security knowledge transition/relocation project, while delivering substantial cost savings, and enhancing security and service with 2 new access provisioning systems:
• Saved more than $1MM and garnered Special Recognition Award by championing/gaining approval for and guiding inexperienced staff in project management and systems analysis to successfully implement 2 automated system access request systems. Systems greatly decreased SLA turnaround time and improved security controls.
• Relocated security operations from Confidential Headquarters to Richmond, Virginia on 3-month fast track, achieving highly visible transfer of systems and knowledge critical to Wall Street perception after Philip Morris International divestiture in difficult setting involving staff displacement. Included complete documentation of enterprise processes and procedures.
• Created templates for assessment of security controls status for vendor sites as well as internal audit compliance, using diplomacy and persuasion to overcome client resistance in both instances. Security assessment enabled Confidential to execute planned cost-saving measures through outsourcing of sensitive data to vendor data processing environment.
• Identified need and initiated development of process that improved Audit Governance Management through orderly schedule distribution to user community, periodic audit behavior education for clients, and advice/support during audits. Continuous Compliance Monitoring process enabled client self-checks, with security group consultation as needed.

Manager of Security Operations & Security Consulting

Confidential

Responsibilities:

• Reporting to Director of Risk Management, headed team of 13 providing system access provisioning for 10,000 users and information security solutions and consulting to client community. Controlled $6MM in operating/capital/project budgets. Participated in RFP’s and RFI’s, and negotiated contracts/ensured compliance with our security controls.
• Transformed perception of Security Operations team throughout company while improving security, service, compliance, and reducing costs by millions of dollars—for existing systems, those currently under development, and future:
• Designed system that automated previously manual (fax, mail, etc.) system access requests at all stages, reducing lead time from 7 to 4 days, improving security, and enabling SOX compliance, while “going Green” with paperless process.
• Encouraged staff development through education and certification, and leveraged every opportunity to communicate their contributions to management, yielding dramatically improved status of team and promotion of 2 staff members.
• Achieved headcount reduction of 5 and savings exceeding $500K by outsourcing access provisioning. Created Compliance Program to assure proper monitoring of security control by outsourced vendor, enabling company to achieve desired cost savings while maintaining secure IT environment.
• Developed Computer Incident Response Program and created detailed manual for handling computer incidents that enabled company to perform due diligence and ensured protection in case of unauthorized intrusion.
• Designed and led implementation of process assuring in corporation of IT security requirements early in system development life cycle, saving post-implementation expenses for re-work and enhancements while improving security.

Confidential, New York, New York

IT Security Operations Manager

Responsibilities:

• Managed team of 8 responsible for provisioning system access impacting more than 30,000 clients across 6 operating companies within Confidential family. Negotiated IT Security Service Level Agreements with clients and contracts with security vendors.
• Armed company with information and tools needed to meet Sarbanes Oxley requirements with implementation of Intrusion Detection System providing real-time alerts and documentation of potential intrusions.
• Transitioned IT Services back to individual operating companies as needed to allow corporation to position itself to move quickly on spinoffs/divestitures and provide maximum ROI to stockholders.
• Moved IT services for 2 operating companies to outsourcer in preparation for breakup of enterprise.
• Developed Compliance Program employing periodic reviews to ensure SOX controls compliance, and introduced security reporting capabilities to demonstrate ROI for security function.

Client Account Manager

Confidential

Responsibilities:

• Approached by senior management to repair Confidential ’ strained relationship with Headquarters due to deficiencies in providing computer and project management services, while managing IT services delivery provided by 100+ professionals to 4 of 6 operating companies throughout Confidential . and Latin America in shared services organization.
• Aligned services to satisfy Headquarters requirements and expectations, hired/honed skills of technical team, and initiated intensive review to get control of projects, assess and deliver on commitments, and restore relationship.
• Engineered and implemented Service Survey to determine clients’ perception of services and address issues, confirming improvement in customer satisfaction for 100% of operating companies to which team delivered IT services.
• Won Special Recognition Award for role in guiding execution of Confidential ’ first-ever Disaster Recovery Test.
• Captured Above and Beyond the Call of Duty ( Confidential ) Award for successful relocation of Kraft Latin America headquarters in timely manner and transparent to user community; also received letter of appreciation from Confidential CIO.

Security Operations Manager

Confidential

Responsibilities:

• Managed IT security team of 5 and indirectly supervised 3 consultants providing access provisioning access for 6 operating companies. Enhanced processes to comply with IT security policies and audit requirements and handle policy exception requests.
• Saved $6MM over 5 years by consolidating disaster recovery services, while increasing service coverage.
• Initiated periodic access reviews, instituted standards and checks, improved documentation and audit-ability, while reducing headcount requirements for access management.
• Centralized access provisioning of 4 operating companies, earning Special Recognition Award.
• Consolidated Disaster Recovery Services for 6 operating companies into single function.

Security Operations Supervisor

Confidential

Responsibilities:

• Engineered and directed IT security operations services for first 2 operating companies brought into new shared services organization.
• Engineered 43% of functions used as foundation for shared services organization that saved company Millions.
• Prepared and coordinated plan to test security applications for Confidential compliance.
• Led Confidential turnover process by creating escalation procedure and War Room to monitor data processing activities.