Deputy Commissioner and Internal Control Officer Resume

PROFILE:

Senior information security, risk and data governance professional with progressive experience in policy development, risk assessment, project management, regulatory compliance, employee training, systems monitoring, incident response and data breach investigation.

EXPERTISE:

Remediate high profile data breaches
Create comprehensive acceptable-use and data governance policies
Provide interim and contract CISO services
Designinformation security programs to address clients’ risk presence and technologies
Design and implement innovative employee training programs
Create comprehensive compliance programs (HIPAA, ISO 27001, NIST, FISMA, PCI-DSS, 201 CMR 17)
Extensive international experience within China and Europe
Mitigate Advanced Persistent Threats (APT)
Conduct enterprise risk assessments
Extensive network throughout all industries and regulatory agencies
CGEIT and CRISC certifications

PROFESSIONAL EXPERIENCE:

Confidential
President (February 2008 – Present)

Create information security programs unique to clients’ operations, technologies and risk
Establish e-mail, mobile device, portable storage device, password and incident response polices
Manage complex information security, privacy and compliance projects (PMO)
Conduct comprehensive risk assessments
Develop and deploy information security training and awareness programs
Provide comprehensive information security advice throughout all sectors and industries
Conduct regulatory compliance assessments and coordinate remediation of exceptions
Direct data breach responses
Create and implement GLBA, HIPAA, NIST, FISMA, PCI-DSS, 201CMR17 compliance programs
Extensive knowledge of encryption, anti-virus, IDS and IPS technologies

Confidential
Deputy Commissioner and Internal Control Officer (January 1998 – February 2008)

Created and managed nationally recognized information security program
Provided leadership, strategic direction and expertise related to information security
Implemented comprehensive data governance program
Deployed nationally recognized IT audit and risk assessment model
Managed IT security and internal audit groups
Ensured state and federal regulatory compliance
Identified and mitigated risk to the agency’s information systems

Confidential
Internal Audit Director (May 1996 – January 1998)

Created data surveillance program to identify unauthorized access of confidential data
Prepared and executed annual audit program to evaluate risk and identify vulnerabilities
Directed operational and system reviews and reported findings to executive management
Provided management with recommendations to strengthen controls and improve efficiencies
Assessed compliance with IT controls through ongoing administrative and technical reviews
Coordinated all external audits of the agency’s applications and operating systems

EDUCATION:

B.A. Economics

Strategic Leadership for Executives

We provide IT Staff Augmentation Services!

We'd love your feedback!

Resume Categories

Client Services

Job Seekers

Visa Sponsorship