Senior Information Security Officer
North Mankato, Mn, Us
Spearheaded corporate security strategy and program efforts across the company, including Information Technology, HR, Internal Audit, Compliance, Legal, and Business Units. Developed and implemented security controls, standards, guidelines, and procedures. Maintained compliance with Federal (Sarbanes-Oxley, HIPAA/HITECH, GLBA, FISMA, NIST, COBIT, ISO, CIS, etc.,), State (California SB1386, Massachusetts 201 CRM 17), and industry (PCI DSS, NASPO) requirements while monitoring risk and providing tighter integration with customers and business partners. Administered annual information security budgets and led the corporate information security team.