Sr. Manager It Security Risk Resume
3.00/5 (Submit Your Rating)
SUMMARY
- IT professional wif vast experience in teh IT arena including Confidential, Security Awareness, Privacy Laws, Project Management, Software Development, Release Management, Business Analytics and Data Mining
- Managed large teams onshore and offshore
- Experienced in gathering requirements and technical specifications as well as tracking & managing resources across multiple functional areas
- Experience wif working wif Legacy systems, databases and reporting
- Web Developer/Programmer wif several U.S. patents granted for innovative technology solutions
- Excellent analytical problem - solving skills wif a strong focus on process improvement
- Self-motivated, dependable and outgoing wif teh ability to manage employees in a highly professional and diplomatic manner
TECHNICAL SKILLS
- ITIL
- Certified Ethical Hacker
- PlanView Administration
- OneTrust
- LexisNexis
- Cofense/Phishing
- ProofPoint/Wombat/Triage
- BitSight
- Varonis
- Cofense
- MS Project 2010
- Active Server Pages
- SQL Server
- MS Access
- HTML / DHTML / XML
- CSS / JavaScript / Visual Basic
PROFESSIONAL EXPERIENCE
Sr. Manager IT Security Risk
Confidential
Responsibilities:
- Developed processes and methods in support of teh California Consumer Privacy Act CCPA
- Implemented OneTrust wif an Integration wif LexisNexis
- Managed IT Risks Acceptance process
- Vendor Risk Assessments
- Identifying/discovering sensitive data across teh footprint and ensuring proper monitoring and controls are in place
- PCI Confidential
- Vulnerability scans
- Revising/updating policies
- Phishing campaigns (Cofense as well as ProofPoint)
- Security Awareness
- Performing access reviews and working wif auditors to collect artifacts and remediate deficiencies
- Implemented BitSight and a formal Cyber Risk Rating Program
- Developed Internal Data Protection and External FileSharing Oversight programs
Senior Analyst, IT Risk
Confidential
Responsibilities:
- Perform weekly, monthly, quarterly and semi-annual reviews of SOX controls and technical security controls to ensure continuous adherence to Company policies and applicable regulations
- Supporting point of contact for external and internal IT-related audits
- Assist in developing and monitoring SOX remediation plans
- Developed in house a web-based deficiency portal which allows collaborative online tracking and remediating process
- Evaluate and update security policies, procedures, and standards to ensure alignment wif applicable security control requirements
- Assist wif teh execution of IT security risk assessments against industry leading security controls frameworks
- Regularly update metrics and analysis to track remediation progress and demonstration of control maturity and TEMPeffectiveness
- Conduct third-party security and Confidential assessments and documents detailed results
- Coordinate wif data owners to ensure accuracy and completeness of sensitive Company information
- Evaluate teh adequacy and TEMPeffectiveness of safeguards protecting sensitive Company information
- Collecting and maintaining a database of PII and GDPR data sources
- Develop process flows, technical diagrams, and control narratives for complex IT environments to aid in asset risk classification
IT Release Manager
Confidential
Responsibilities:
- Defining and managing IT software releases for all Tier 1, 2 and 3 projects as well as initiatives
- Working closely wif teh PM’s to align work in all environments from concept through deployment
- Ensuring dat all projects targeted for a release meet pre-defined criteria, checklists, gates and approvals
- Developed our online PMO project tracking tool which provides real time project status wif robust reporting which details teh current organizational roadmap including all key dates, phases, known impacts and dependencies across all business areas
- Collecting and maintaining a database of PII data sources
- Performing weekly, monthly, quarterly and semi-annual SOX system access and role audits
- Responsible for teh Schedule, Budget, Resources and Change Control processes
- PM for numerous Tier 1 & 2 initiatives
- Began laying teh foundation for Release Management controls and process across teh organization
- IDM Project Manager - Identity and Access Management (Courion Suite)
- Leading teh implementation of teh Courion Suite to provide an automated user access and profile creation for all Confidential ’s employees
Confidential
Project Manager
Responsibilities:
- Point of contact for IBM relative to teh Sterling OMS Installation
- Interface between IBM and all Confidential ’s departments participating in this initiative
- Administering teh project change control procedure wif teh IBM Project Manager
- Obtain/provide information/requirements, data, approvals and decisions
- Coordinate environment readiness schedules
- Maintain project plan
- Develop/Maintain Deployment & Cutover plan
- Requirements gathering via interviews, group conference calls & documentation analysis including database and software specifications
- Developing project timelines
- Acquiring resources and managing each phase of implementation (Hardware ordering, installation, power, network, OS, Database, storage, 3rd party software, backup and recovery, client application and testing)
- Liaison between client, subject matter experts and technical solution designers
- Managing teh cost estimates and obtaining funding
- Publishing daily status including any jeopardies or escalations
- Obtain client signoff Confidential key delivery points i.e. high-level design and detailed technical solutions
- Monthly financial reconciliation of all projects
- Successfully managed code blue and urgent delivery projects. These are out of process projects dat typically cannot follow normal hardware/software replacement cycles
Project Manager / Business Analyst
Confidential
Responsibilities:
- Monthly financial reconciliation of all projects
- Managing all phases of teh SDLC in supporting teh Confidential Online Gateway (BOG)
- BOG was a portal for large business customers, which allowed them to view and manage their network as well as to view and pay their bill online
- Managed teh end-to-end project, through teh project life cycle wifin teh planned scope, schedule, cost, and quality
- Managed teh Confidential &T Business Direct portal, which allows bill view and payment, place orders and check status, manage network, diagnose and report trouble
- Provided clear, concise and accurate project documentation
- Managed change requests, development and testing
- Managed teh client on boarding process. Manual and automated processes
- Created user requirements / functional requirements
- Review and signoff of detailed system design documents
- Created use cases/test cases
- Review and signoff of technical requirements
- Managed/conducted user acceptance testing
- Managed/conducted regression testing
Manager
Confidential
Responsibilities:
- Managed numerous initiatives dealing wif cost transformation and process improvement
- Assisted wif teh "best sourcing" initiatives
- Resource Management
- Business case development
- Responsible for availability and reliability of applications and infrastructure for multiple business units
- Addressed availability and performance problems, both proactively and during real-time problem events
- Ensuring dat appropriate tools, processes, and technical resources were in place to assess availability, performance, and capacity
- Provided input to infrastructure planners for infrastructure life cycle management activities
- Technical writer, defining requirements and technical specifications
- Responsible for establishing organizational technical direction
- Responsible for budget and software products both custom and off teh shelf
- Developed and supported teh “BERT” ( Confidential Enterprise Reporting Tool) which collects data for over 20,000 employees and reports hourly data required by teh Confidential performance MSOC process Supports 120 centers, used to improve employee efficiency, performance and quality
- Maintained 70 + servers wif 20+ Terabytes of data
- Managed 4 full time employees, and approximately 40 consultants both on shore and offshore
Technology Planner
Confidential
Responsibilities:
- Developed BCCS ( Confidential Business & Consumer Services) supporting teh eRepair internet application. eRepair is an internet-based tool dat provides trouble ticket status and history for Confidential large business customers
- Tasks included documenting/assessing and defining a project's scope, timeline, organizational costs, human capital resources, identifying project risks, developed plans, tracked milestones, success criteria and managed communications plan/management reports
- Managed five employees wif teh responsibility of streamlining and mechanizing internal organizational processes
- Delivered more TEMPthan 20 intranet-based applications wifin teh 1st QTR of 2002
- Developed and supported an application used to deliver performance and ranking reports for 1300+ call center employees
- Served in a technical consultative role assisting in organizational process improvements
- Enforced team adherence to project and application life cycle process; analysis, design, development, test, deployment and ongoing maintenance
- Planned and delivered improved Intranet capabilities for Consumer and Customer Markets
- Worked closely wif teh corporate E-store ( Confidential .com) team to plan and deliver Web-based customer self-service and trouble reporting capabilities
- Performed meeting facilitation and issue documentation /tracking
- Project manager for Consumer ORBIT (an online document repository)
- Project lead for teh Confidential eRepair trouble report and status project
