Brian Nguyen, Cisa Email & Phone Number

Carmel, In, Us

Carmel, Indiana

- Third Party Risk Management (TPRM) manager within the Sourcing & Vendor Management Office team- Led CNO's Vendor Audit Program to proactively assess CNO's third-party administrators, vendors that process claims and/or collect/apply premiums on behalf of CNO, and key outside service providers- Executed CNO's Vendor Risk Assessment Program covering ~300 key vendors to ensure third parties are subject to appropriate due diligence and ongoing monitoring- Managed 2 team members (1 Risk Manager and 1 Team Lead) from the offshore team- Communicated audit findings and recommendations to vendors and develop action plans to remediate audit findings

Carmel, Indiana

- Performed ISO 27001/27002, Cloud Security Alliance Cloud Controls Matrix, and NIST gap assessments for healthcare and banking clients- Provided information security consulting and advisory services, specializing in HIPAA compliance and cyber risk management- Developed third-party risk management programs for clients that includes information security policies & procedures, and vendor assessment questionnaires based on SIG and ISO 27002- Led HIPAA assessments using the Office for Civil Rights (OCR) HIPAA Security Rule to identify and assess appropriate administrative, physical, and technical safeguards in protecting electronic protected health information (ePHI)- Conducted risk assessments of information systems and infrastructure, develop appropriate risk treatment and mitigation options, and articulate findings and recommendations to client IT project teams and management- Provided information security consulting and advisory services for client organizations to identify risk and mature their information security programs- Defined and provided pragmatic security guidance to clients that balance business benefits and risks

Minneapolis, Minnesota

- Led comprehensive information security assessments in alignment with security controls on applications, platforms, business processes, and vendors to ensure security compliance with PCI, GLBA, and HIPAA regulations utilizing the ISO 27000 framework- Performed HIPAA risk assessments for Target's critical assets containing ePHI within the Clinic, Pharmacy, and Health Plan space- Executed a GLBA-specific Joint IT Exam finding validation project by validating 14 remediated findings through performing control design and operational effectiveness testing

Minneapolis, Minnesota

- Engaged with Fortune 100 clients in the healthcare and banking industries to mitigate risks and optimize processes around IT access management, change management, and operations- Assessed security configurations over a variety of platforms and applications encompassing SAP, Oracle, PeopleSoft, UNIX, and Linux as well as proprietary applications to ascertain security effectiveness for clients- Documented and communicated findings to clients for policy compliance and risk reduction

Minneapolis, Minnesota

- Engaged with IT project managers with aspects of scheduling, budgeting, and executing projects related to employee engagement and sales channel incentive programs- Utilized IBM TWS to provide IT batch monitoring and scheduling (Control_M and EDE jobs) for the VISA Rewards Program- Executed project plans, resources, and work break-down structures (WBS) while effectively communicating the information back to the project managers- Excelled at communicating with key executives and stakeholders to provide accurate executive summary reports and website system availabilities regarding the ongoing VISA initiatives

Minneapolis, Minnesota

- Handled inside-sales process using consultative sales concepts, market research, database marketing, and direct marketing to translation service prospects - Generated qualified translation leads to sales team that increased the firm's revenues by 22% during Q2 of 2010- Utilized relational contact/client management database to support the company’s strategic sales and marketing efforts

Bachelor Of Science In Business, Management Information Systems (Mis)

Bachelor Of Science In Business, Marketing