Brian Clary Email & Phone Number

Atlanta, Ga, Us

Atlanta, Ga, Us

Windsor, Berkshire, Gb

Dallas, Tx, Us

Managed Service Provider Payment Card Industry (PCI) audits for multiple products and services for both initial PCI DSS (Data Security Standard) certifications and annual recertifications, covering over 100,000 systems and 200 facilities, resulting in increased revenue for the certified products and services.-Created audit schedule and evidence requests based on feedback from the Qualified Security Assessor (QSA).-Worked with data owners to facilitate the collection of required audit evidence, providing guidance on what information should be provided.-Tracked and provided visibility to the status of each audit, including outstanding or overdue items and any issues potentially impacting compliance.-Facilitated meetings with the QSA and internal representatives to address any questions or issues identified by either the QSA or AT&T.-Provided guidance on acceptable compensating controls in cases where current security controls did not meet PCI DSS objectives. -Reviewed draft Attestations of Compliance (AOCs) and Reports on Compliance (ROCs) for accuracy prior to final approval by the QSA and AT&T leadership.-Upon completion of each audit, conducted a Postmortem to review and formally communicate issues and opportunities for improvement identified during the audit to ensure outstanding items are addressed prior to next year’s audit.Conducted multiple gap assessments of the following:-Operation of IT security controls of network services that are provided to multiple customers to identify non-compliance with the customers specific security policies and procedures, provided guidance on best practices and evidence to provide, which resulted in improving the non-compliance rate from 7% (which was failing an external audit) to 0.6% in less than nine months.-The security posture of network devices to identify potential issues which could prevent ISO and PCI certification.-Operation of SOC2 controls for a product used by Fortune 500 customers.

Dallas, Tx, Us

Lakeland, Florida, Us

New York, Ny, Us

Gainesville, Florida, Us

Developed and maintained the EDIS Routing System (ASP/VBScript and SQL), a web application which streamlined and automated the publication submission and approval process for EDIS, an online content management system. Performed database maintenance (Access and SQL), including design and data conversion.Developed XML and XSL for UF/IFAS online publications to help provide format flexibility and automation of format conversion.