Blake Walker Email & Phone Number

Nashville, Tn, Us

Nashville, Tennessee, United States

• Lead Global Remediation Team who prioritize and track large scale, high visibility IT/cybersecurity projects to reduce or mitigate risks that have been identified, with a priority of Red Team campaigns• Assess risk and establish risk mitigation plans with Cyber Defense Teams to reduce security risk identified via Red Team campaigns using products such as such as Microsoft Defender for Endpoint, CrowdStrike Falcon, Splunk, Microsoft Office 365, Microsoft Entra ID, and Windows Active Directory• Communicate and report to Executive Leadership progress of remediation• Lead Global Breach and Attack Simulation (BAS) Team which performs automated cybersecurity testing to identify and remediate high risk vulnerabilities based upon MITRE ATT&CK Framework• Select and/or create threat profiles to identify the latest adversarial tactics, techniques, and procedures (TTPs) to emulate against Deloitte infrastructure• Facilitate the configuration and placement of BAS infrastructure with internal stakeholders• Establish and execute BAS exercises by partnering with internal stakeholders to reduce organization risk • Overcome delivery challenges, including but not limited to; troubleshooting, priority conflicts, business versus technology perspective, resource availability and engagement • Develop a roadmap of prioritized remediation activities to help address potential gaps, based on the criticality of findings and threat profile

Nashville, Tennessee, United States

- Contribute to and support the Secure Systems Development Lifecycle (S-SDLC) including functional and non-functional cybersecurity requirements for all new infrastructure projects.- Work with the Cybersecurity Architecture team and apply reference architectures for security solutions design and implementation.- Work with the Cyber Defense group and the Security Operations Center, evaluate the effectiveness of the security controls and architectures in relationship to actual intrusions seen on the Deloitte network, reported threats at peer organizations and overall cybersecurity threats in the internet ecosystem.- Perform technology security risk assessments for Global infrastructure.- Work closely in defining cybersecurity related policies and configurations for Critical Infrastructure Services.- Work closely with the Shared Security Service teams to ensure new IT solutions and major changes receive appropriate testing prior to deployment into production.- Establishing risk mitigation plans and partnering with internal stakeholders to reduce risk

Nashville, Tennessee

- Lead SOC 2 and ISO 27001 audits and related projects and manage staff.- Liaison with external auditor to scope and facilitate ISO 27001 and SOC 2 audits.- Understand technology controls, testing of controls, and supporting evidence to meet SOC 2 Trust Service Criteria and ISO 27001.- Understand technology controls that impact on premises and cloud technology, operational risk to the Deloitte Technology organization as well as related laws, regulations, and industry standards, specifically related to internal and cloud technology solutions.- Recommend policies, standards, procedures, and controls to assure the confidentiality, integrity, and availability of the information technology environment for on premises as well as cloud hosted IT applications and infrastructure meet the SOC 2 Trust Service Criteria.- Manage audit findings; identify and track remediation activities to meet target dates for closure, and track/report progress.- Work with the appropriate Information Security, Office of General Counsel, Risk Management, and leadership to determine scope of ISO 27001 and SOC 2 audits,.

Greater St. Louis Area

Responsible for the preparation of third-party attestation reports, including System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for Cybersecurity and WebTrust for CAs, as well as ISO 27001 applying most areas of the governing standard as necessary and documenting, validating, testing, and assessing various control systems, including internal controls.Applied knowledge and understanding of the collective effect of various factors on establishing or enhancing effectiveness, or mitigating the risks, of specific policies and procedures by:- Identifying and considering all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of engagement team - Making constructive suggestions to improve client internal controls and accounting procedures - Documenting and validating the operating effectiveness of the clients’ internal control system Supervising and reviewing the work of staff - Documenting business and IT processes and controls and tests key controls for service organizations in a variety of industries - Identifying and prioritizing key risks and assesses their impact and likeliness of occurrence. - Communicating to the client areas to improve processes, strengthen controls, mitigate risks, and/or increase efficiency - Developing and maintaining relationships with client personnel and management; and - Ensuring technology is appropriately integrated into the examination process

Greater St. Louis Area

Clayton, Missouri

Bachelor Of Business Administration (B.B.A.), Accounting

Activities and Societies: Member of Men's Basketball team.

Masters Of Accountancy