Deputy Commissioner And Internal Control Officer Resume Profile
5.00/5 (Submit Your Rating)
PROFILE:
Senior cyber security professional with extensive experience in risk assessment, advanced threat mitigation, vendor management, regulatory compliance, policy development, employee training, systems monitoring, and incident response.
EXPERTISE:
- Identify and mitigate advanced cyber threats
- Conduct comprehensive enterprise risk assessments
- Manage third-party vendors
- Create acceptable-use and data governance policies
- Provide interim CISO services
- Design security programs to address risk presence and regulatory exposure
- Expert witness
- Implement cyber security training programs
- Create compliance programs FISMA, NIST, HIPAA, PCI, GLBA
- Extensive network throughout diverse industries and regulatory agencies
- CGEIT and CRISC certifications
PROFESSIONAL EXPERIENCE:
Confidential
President
- Create information security programs unique to clients' operations, technologies and risk
- Establish e-mail, mobile device, portable storage device, password and incident response polices
- Manage complex information security, privacy and compliance projects PMO
- Conduct comprehensive risk assessments and compliance audits
- Develop and deploy information security training and awareness programs
- Create and implement FISMA, NIST PCI-DSS, GLBA compliance programs
- Extensive knowledge of encryption, anti-virus, IDS and IPS technologies
Confidential
Deputy Commissioner and Internal Control Officer
- Created and managed nationally recognized information security program
- Provided leadership, strategic direction and expertise related to information security and data privacy
- Designed and managed agency's privacy protection program
- Managed IT security, internal audit and internal affairs functions
- Monitored state and federal regulatory compliance NIST 800-53 and Publication 1075
- Identified and mitigated risk to the agency's information systems
Confidential
Internal Audit Director
- Created data surveillance program to identify unauthorized access of confidential data
- Prepared and executed annual audit program to evaluate risk and identify vulnerabilities
- Directed operational and system reviews and reported findings to executive management
- Provided management with recommendations to strengthen controls and improve efficiencies
- Assessed compliance with IT controls through ongoing administrative and technical reviews
- Coordinated all external audits of the agency's applications and operating systems
