Information Security and Project Manager Resume

SUMMARY:

Solutions - focused, motivated professional with MSCIS and MBA degrees and a comprehensive global background in both information technology and business management.
Display calm demeanor in the face of difficulties; ability to manage multiple simultaneous projects while working under pressure in fast-paced environments, highly versatile; quickly masters new roles, responsibilities, technologies, and environments; innate reputation for integrity, problem solving abilities, and work ethic.
Continuously pursues opportunities to learn and takes on challenges for further professional development and growth.
Information Security and Technology; Identity Management, access control management, Program and Project Management; Program and Business Analysis; Strategic Planning; Organizational Leadership; Decision-Making; Information Gathering; Presentations; Oral, Written & Data Communications; Interpersonal Relations; Collaborative Teamwork; Organization; Prioritization; Database Management; Information Technology (IT) Auditing; Compliance; Productivity Improvement; Training; Business Continuity; Disaster Recovery and Incident Response.

PROFESSIONAL EXPERIENCE:

Confidential

Information Security and Project Manager

Responsibilities:

Lead team writing and maintain policies, procedures and standards, work with vendors for vendor industry laws and regulation compliance, information security awareness training and data protection.

Confidential, Chicago, IL

Information Security and Project Manager

Responsibilities:

Oversight on information security projects, governance and compliance.
Create site for the policies, procedures etc; for repository, approval, versioning etc., for compliance, accurate audit trail ensuring confidentiality, integrity and availability with a full automation of the site by implementing all attributes of SharePoint.
Lead project teams for Security, Governance, Risk Management, and Compliance (GRC) on information systems and processes; project on PCI 3.0 assessment and compliance, Information Security and training.
Determined appropriate policies, procedures and standards for information security to safeguard and protect data assets and confidentiality, integrity and availability of information.

Confidential, Chicago, IL

Process Engineering and Information Security Manager

Responsibilities:

Maintained strong relationships with Technology leadership to ensure: complete, accurate and appropriate requirements for assigned process initiatives.
Successfully drove the business case for assigned process initiatives.
Acted as the Product Owner; supported defining and prioritizing scope for assigned process initiatives.
Ensured enterprise wide infrastructure projects adhered and are in compliance to all information security requirements.
Information security expert advisor and member for change management, data governance and privacy committee.
Closely worked with vendor management team, review contracts to ensure compliance with security, federal and state regulations and laws.
Worked together with project and program managers to communicate progress, identify and resolve issues and monitor the performance of assigned process initiatives.
Introduced the Information Security Program, companywide policies, procedures, standards and guidelines and created the SharePoint site for the policies, procedures etc; for repository, approval, versioning etc., for compliance, accurate audit trail ensuring confidentiality, integrity and availability with a full automation of the site by implementing all attributes of SharePoint

Confidential, Chicago, IL

Assistant Manager Technology

Responsibilities:

Confidential

Project Manager/ IT Audit Manager, Chicago, IL

Responsibilities:

Performed risk assessments, and submit recommendations for process improvements.
Managed security devices such as firewall, Intrusion Detection Systems, and monitored security logs caused by these devices.
Negotiated contracts with suppliers; evaluated bids and proposal and make awards decisions; reviewed and interpreted vendor contracts for accuracy and completeness; performed vendor compliance to applicable regulations and laws.
IT Strategic and management planning: develop a risk profile for given systems, evaluated the efficiency and effectiveness of the internal (and security) control environment and their implementation, by analyzing and assessing vulnerabilities and associated risk.
Adept at assessing complex security information management application development, implementing and processing risks which warrant audit attention.
Designed, developed, and implemented the organization's disaster recovery and business continuity plans for information systems.