Andy Kim, Cissp, Cisa, Cdpse, Cmmc Rp Email & Phone Number

Pasadena, Ca, Us

Pasadena, California, United States

CyberCatch Delivers Zero Incident ProtectionOrganizations leveraging CyberCatch's cybersecurity solutions achieved an impeccable record of zero unauthorized disclosures of protected information. This highlights the effectiveness of CyberCatch in safeguarding sensitive data across various sectors.Audit Success with CyberCatchCyberCatch's clientele consistently passed internal and external audits with a Satisfactory rating, underscoring the robustness of CyberCatch's security measures and compliance processes.Broad Industry ImpactThrough CyberCatch, I managed information security programs for over 100+ organizations spanning critical sectors like:- Department of Defense (DoD) supply chain- Manufacturing- Healthcare- Finance- Software- EducationThis diverse experience ensured comprehensive compliance and effective control testing across these industries.Executive Leadership and GovernanceI played a pivotal role in representing Information Security at the executive level, participating in:- Governance committees- Board meetings- Cross-departmental collaborationThis engagement facilitated strategic decision-making and policy development that bolstered organizational security.Product Management and InnovationAs a Product Manager at CyberCatch, I was deeply involved in the development and management of:- CyberCatch GRC- MITRE ATT&CK control testing SaaS platform hosted on AWSThese platforms have been instrumental in providing scalable, cloud-based solutions for risk management and cybersecurity compliance.

Los Angeles, California, United States

Ensuring Regulatory Compliance with Zero Findings- Achieved 100% Compliance: Successfully ensured annual compliance with the New York Department of Finance Cybersecurity Regulation (NYDFS) for insurance companies and PCI DSS, achieving zero findings in audits, which reflects a robust security posture and thorough preparation.- Anticipating Privacy Regulations: Implemented controls mandated by the California Consumer Privacy Act (CCPA) at Answer Financial, two years before regulatory enforcement, to proactively protect customer privacy and mitigate potential risks.Pioneering Cloud and Application Security Initiatives- Cloud Security Infrastructure: Built the first cloud security infrastructure at Allstate using Azure, facilitating a secure transition of on-premises applications to the cloud, demonstrating innovative use of technology for enhanced security.- IAST Implementation: Pioneered the deployment of Interactive Applications Security Testing (IAST) for application security, significantly reducing false positives to less than 20%, which improved the efficiency of security testing processes.Driving Corporate Security Programs- Global Security Program Implementation: Led the implementation of Allstate’s Global Information Security and Privacy program at Answer Financial, ensuring a comprehensive security framework was in place for a digital insurance company.- Reporting and Leadership: Presented quarterly information security reports and annual Board reports, providing strategic insights into the status of Information Security, showcasing leadership in communicating security status effectively.Strategic Management and Leadership- Team and Budget Management: Managed the information security staff and project budget, ensuring resources were allocated efficiently to meet security objectives.

Los Angeles, California, United States

Fraud Prevention and Digital Risk Management ExpertRevolutionized Online Fraud Detection- Spearheaded the development of a cutting-edge fraud detection system, leveraging a custom blend of startup identity verification software and AI/ML technologies.- Achieved a remarkable 15% increase in detection accuracy, elevating the success rate from 75% to 90%.- Solution's exceptional performance led to its acquisition by Transunion, a major player in the credit reporting industry.Accelerated Adoption of Dynamic Credit Decisions- Provided crucial subject matter expertise on digital crime, fraud, and emerging risks to Fortune 500 financial institutions.- Facilitated the implementation of Neustar Fraud Prevention solutions, enabling just-in-time credit decisions and enhancing overall security posture.Drove Multi-Million Dollar Sales Growth- Orchestrated high-impact sales presentations and thought leadership initiatives for top 10 US financial institutions.- Focused on fraud prevention solutions for call centers, internet platforms, and mobile applications.- Significantly improved sales closure rates, directly contributing to multi-million dollar deal acquisitions.

Los Angeles, California, United States

Key Cybersecurity Innovator and LeaderPioneered the development of an international cybersecurity product and consulting practice at FIS, generating a multi-million dollar client portfolio within 3 years, culminating in the acquisition of the business by Capco.Virtual CISO and Risk Management Expert- Delivered a virtual Chief Information Security Officer (vCISO) service, ensuring information security compliance for over 1300+ banks within FIS's core banking portfolio.- Spearheaded GLBA and IT General Controls outsourced Audit and Risk Assessment services, enhancing security measures across the organization.Cybersecurity Product Development- Launched a pioneering anomaly detection product utilizing deep learning and machine learning, aimed at preventing insider threats and enhancing overall cybersecurity posture.

Pasadena, California, United States

Southern California's Largest Regional BankResponsibilities:- Regulatory Compliance: Successfully closed out an Office of the Comptroller of Currency (OCC) regulatory finding involving IT risk assessment issues, enabling the bank to accept a pending acquisition offer from CIT Bank, showcasing exceptional regulatory relations management. - Information Security: Spearheaded comprehensive information security measures to protect digital assets and customer data across the Lending, Retail, and Commercial Banking Businesses, ensuring compliance with data protection regulations and safeguarding sensitive information.- Risk Management: Implemented robust IT risk assessment strategies, identified and mitigated potential vulnerabilities, and ensured alignment with the OCC's operational resilience and cybersecurity priorities.- Business Continuity and Disaster Recovery: Developed and maintained business continuity plans and disaster recovery strategies to ensure critical operations continued during disruptions, demonstrating forward-thinking crisis management.- Security Audits: Conducted thorough security audits across various banking divisions, identifying and addressing vulnerabilities while contributing to the bank's overall risk management framework.Achievements:-Acquisition Facilitation: Directly contributed to the bank's ability to pursue and accept a strategic acquisition offer by resolving regulatory issues, showcasing the ability to navigate complex regulatory landscapes. -Regulatory Excellence: Managed interactions with regulatory bodies like the OCC, ensuring full compliance with banking regulations and maintaining good standing with regulatory authorities.-Cross-Functional Leadership: Oversaw critical IT and security functions across multiple business lines, demonstrating the ability to manage diverse operational risks and ensure security measures were tailored to each division's needs.

San Diego, California, United States

Information Security and Risk Management Expert at Citigroup- Vanguard Information Security Management for Citi's corporate application development organizations, overseeing a portfolio of over 700 applications critical to several core functions including Human Resources, Finance, Legal, Regulatory Compliance, Corporate Investigations, and Global Information Security Administration.Key Responsibilities:- Compliance Oversight: Ensured strict adherence to laws, regulations, and Citi's internal policies, aligning with the company's commitment to ethical conduct. - Risk Management: Developed and maintained comprehensive risk management strategies, focusing on data governance and risk management, critical areas where Citigroup has faced regulatory scrutiny.- Performance Metrics Reporting: Produced and analyzed monthly Security Metrics Reports for Citi Corporate Center, providing actionable insights to senior management.Impact:- Enhanced Security Posture: Through robust security measures and proactive risk management, significantly reduced the exposure of sensitive data.- Regulatory Compliance: Addressed Citigroup's ongoing compliance issues by implementing controls to meet regulatory standards.Skills & Expertise:- Deep understanding of Information Security principles, Risk Management, and Compliance.

San Diego, California, United States

HIPAA Security Officer at MedImpact Healthcare Systems, Inc.Regulatory Compliance and Audits: Trail blazer for MedImpact's compliance efforts as HIPAA Security Officer, ensuring adherence to HIPAA regulations during national pharmacy and healthcare plan audits. Successfully facilitated passing the Office of the Inspector General (OIG) review of information security practices, demonstrating expert knowledge in healthcare regulations.Audit Management: Managed and reduced audit issues by an impressive 94% (from 50 to just 3 in one year) through meticulous oversight and implementation of best practices in information security, showcasing exceptional leadership and problem-solving skills.Operational Efficiency: Pioneered automation initiatives that significantly enhanced operational efficiency:Streamlined customer and staff onboarding time by 75% through the implementation of automated entitlement management, identity management, single sign-on, and role-based access control, resulting in significant cost savings and improved user experience.Reduced operational costs by 25% by optimizing processes and leveraging technology to automate critical functions, demonstrating strategic foresight and execution in operational management.

Leading With Analytics, Data Science Training Program & Workshop

Senior leader education program focused on how to leverage analytics to solve business challenges, harness the power of experimentation.

Ba, History, Political Science

Activities and Societies: Sigma Nu