Manage information security for corporate office and 4,000 field locations. Areas of responsibility include regulatory compliance, security policy creation and maintenance, DLP, IDS/IPS, firewalls, internet/extranet communications, URL filtering, enterprise vulnerability assessment, encryption and virtual private networks (VPN).

Manage information security for corporate office and 4,000 field locations. Areas of responsibility include regulatory compliance, security policy creation and maintenance, DLP, IDS/IPS, firewalls, internet/extranet communications, URL filtering, enterprise vulnerability assessment, encryption and virtual private networks (VPN). Ensure level 1 PCI compliance.Serve as liaison between IT department and Internal Audit for annual SOX audit.Work with multiple diverse groups to accomplish security initiatives.Develop and maintain a fiscally responsible Information Security Strategic Plan.Work collaboratively with other functional leaders throughout the organization.Manage project task execution independently and ensure all associated team members deliver their tasks on time, without direct authority.Work with project managers to ensure projects comply with the corporate security policies.Strong, hands on technical expertise in information security architecture.Perform network traffic forensic analysis, utilizing packet capturing software, to isolate malicious network behavior, inappropriate network use or identification of insecure network protocols.Provide on-the-job training, performance assessment, coaching, motivation, and counseling to employees to encourage optimum performance and continued skill development.Facilitate a metrics and reporting framework to measure the efficiency and effectiveness of the security program.Execute security initiatives by maintaining an appropriate level of prioritization, with focus and persistence in an environment of significant change and growth.Responsible for compliance with all laws, rules, and regulations relating to information security technology, specifically PCI, Sarbanes-Oxley, and GLBA.Responsible for creating an annual budget plan for the Information Security Department.Review contractual agreements to ensure they incorporate security requirements.Responsible for security awareness training

Design, implement, and maintain Lowe’s network security infrastructure. Areas of responsibility include firewalls, Internet/Extranet communications, URL filtering, Intrusion Detection security systems, Enterprise Vulnerability Assessment, and Virtual Private Networks (VPN). Assisted with the development of FY2003 Enterprise security initiatives outlining realistic and achievable goals designed to protect Lowe’s perimeter by implementing technology solutions and creating policies to govern and change overall culture.Designed, implemented and managed high availability Internet infrastructure using diversely routed Internet Service Providers and facility locations to ensure business continuity of B2C, B2B, and Enterprise ASP business partnerships.Actively performing security engineering maintenance on Internet infrastructure, firewall configuration, server load balancing, client and site-to-site VPN access, Websense URL filtering and all Extranet connections.Assisted with multiple Corporate Vulnerability Assessments on Internet perimeter, DMZ, dialup networking and all internal devices including network infrastructure and servers. Responsible for designing, testing, and implementing overseas VPN solution that required automatic failover capabilities.Converted all Real Estate locations from dial-up to high speed connectivity which included ordering broadband service, configuring Pix 501 firewalls with VPN and DHCP capabilities, and ensuring that the connections provided consistent and dependable access to the Lowe’s corporate environment.Extensive expertise working with non-technical individuals.

Design, implement, and maintain Lowe’s network security infrastructure. Areas of responsibility include firewalls, Internet/Extranet communications, URL filtering, Intrusion Detection security systems, Enterprise Vulnerability Assessment, and Virtual Private Networks (VPN). Assisted with the development of FY2003 Enterprise security initiatives outlining realistic and achievable goals designed to protect Lowe’s perimeter by implementing technology solutions and creating policies to govern and change overall culture