Christopher Carcich Email & Phone Number

New York, Ny, Us

Jersey City, New Jersey, Us

Jersey City, New Jersey, Us

New York, New York, Us

- Responsible for coordination and support for all Information Security activities, programs and initiatives for multiple Global Consumer Group / Cards business areas across North America.- Support businesses, risk and controls teams, and application managers by providing Information Security oversight, input and assessment on projects and the deployment of emerging technologies.- Be a resource to the business unit on Information Security issues.- Be able to help the business area interpret the IS rules for individual local situations, and to escalate to Information Security Senior Management where needed.- Evaluate key business processes, their supporting applications, and network services to determine the appropriate Information Security solutions Manage and support the completion of regular business unit IS actions.- Apply knowledge of standards, best practices, position papers and general process areas to coordinate the effective review of the business(s) operating processes and process control manuals commensurate with published risk methodologies and business strategies.- Lead Global Information Security Awareness Week 2012 and 2013 for Citi Cards, including coordination of large scale presentations and awareness material. - Prepare and present strategies, recommendations, IS related projects and value propositions to senior leadership teams. Communicate exposures and mitigation status to senior management, as appropriate, using effective communication and influencing skills.- Work with system(s) business owners, technology assessment teams (i.e., Application and Infrastructure Vulnerability Assessments teams), as well as the ISO community to ensure vulnerabilities and system exposures are sufficiently mitigated to maintain risk at acceptable levels and ensure compliance with policies, standards and technical requirements.

New York, New York, Us

- Responsible for assisting in the engineering of the application connectivity through Perimeter Security Operations (PSO) managed firewalls.- Created and managed documentation for all B2C connectivity in the Citi Connectivity Registry (CCR). Represented all in-process requests that involve high risk connectivity for approval on the Third Party Access Solutions Working Group (3PASWG) weekly Call for Information Security risk review.- Reviewed firewall change requests for accuracy and security policy compliance to support all B2B connectivity.- Provide technical guidance to other External Connectivity Management team members. -Provide technical guidance to Citi Businesses, ISO's (Information Security Officers), Citi clients and 3rd party vendors.- Documented new policies and/or procedures as required by Citi Information Security Management. - Worked with other External Connectivity Management group members to ensure that the Process Control Management documentation and other documentations (drawings, databases, spreadsheets, etc.) are up to date and accurate. - Responsible for reviewing Firewall and ACL connectivity to support secure data transfers. - Worked with the Businesses, ISO's (Information Security Officers), Citi Relationship Managers, and IT Groups to re-mediate the vendor identified issues including Encryption, Data Authorization and Data Transmittal.- Interact with Customers/Vendors and Information Security Risk Assessors.- Provide assistance to the business and Customers/Vendors for file movement and data protection of those files as required by Citi policy.- Evaluate Firewall Changes for security risk and policy compliance in the Change Management System for implementation approval.- Maintained information for Firewall rules database, External connectivity drawings, CCR System, Netinfo request review system, DTA (Data Transfer Authorization) Database and Archer Database.

New York, New York, Us

• Reviewed Security Architecture to fulfill the regulatory requirements with the Federal Financial Institutions Examination Council (FFIEC) and Office of the Comptroller of the Currency (OCC).• Recommended solutions for remediation of security issues.• Participation on corporate governance boards, developing and improving policies• Created and led committees to oversee changes to the existing security assessment questionnaire in conjunction with Information Security standards and Federal and State regulatory requirements.• Created and led the vendor Security Assessment/Information Security Risk Assessment integration team to help fuse internal risk assessment methodologies with external third party vendor risk to more completely assess overall risk stance• Worked to integrate BITS FISAP (Financial Institution Shared Assessment Program) into vendor assessment program• Provided Information Security guidance to North America Information Technology assessment team members

London, Gb

•Reviewed new and ongoing Americas Information Technology projects from an Information Security perspective to identify potential risks through the use of security assessments, risk analysis and review of information security controls•Assisted in defining appropriate mitigation strategies through the use of security technologies, policies and procedures•Worked with Infrastructure, Network, Messaging Services, Security Operations and Client (desktop) Teams to ensure security and Support Methodology is consistent with strategic and tactical objectives and to ensure technical compliance in relevance to production environment•Tracked AV threats through mailing lists and antivirus groups and performed an analysis of potential impacts the threats can have on our company•Monitor industry information news from security vendors, security agencies and governmental resources for new threats/vulnerabilities•Troubleshoot, coordinate and document major virus/worm outbreak issues•Designed, built, executed and project managed the consolidation of the Americas disparate Antivirus infrastructures for Server clients on the firm’s intranet as well as in the public and private DMZs•Designed, built, executed and Project managed the creation of a single Antivirus infrastructure for the Americas un-managed workstation clients, made recommendations for the future direction of Americas Antivirus Environment•Lead technical resource on the Ernst and Young Global Antivirus initiative•Designed, built, executed and project managed the Americas Symantec Enterprise Security Architecture (SESA) infrastructure•Americas Antivirus Infrastructure Production Service owner, responsible for 65000+ clients as well as day to day operational monitoring of the management consoles•Security Auditing of environments as requested

London, Gb

• Tier 3 support for NT Systems Services & Administration Group• Senior on a team of Administrators that provided 24/7/365 support for over 1000 Servers in multiple locations across North America• Designed, tested and implemented a multi-tiered SMS 2.0 Infrastructure designed around Intranet, DMZs and Co-Location Sites• Built and managed Systems Management Server Lab Environment.• Designed, tested and implemented Compaq Insight Manager Infrastructure in a large corporate WAN environment• Responsible for infrastructure and security documentation for all projects participated in, including project plans, testing, and pilot documentation• Evaluated service packs and security patches before they were applied into the production environment• Hardened Operating Systems as the servers are placed on to the corporate intranet and internet• Built, secured and maintained new server Operating Systems and hardware as new servers were placed on the corporate intranet and DMZ segments

Bellingham, Washington, Us

•Tier 3 support for internal desktop support, customer helpdesk and field consultants for all Microsoft Security and infrastructure related issues.•Led team for the Windows 2000 upgrade of company data center and documented processes for future use at client sites.•Helped to design and implement DMZ using NIC sanctioned class C IP network enabling web based commerce thru SSL. •Re designed secure web application site enabling use of Remedy web access, Outlook web access, and Citrix Metaframe.•Member of advanced infrastructure business service teams, involved with offsite consulting for Microsoft systems security. •Developed disaster recovery policies for the organization and upgraded existing backup hardware.•Set up and maintained security access-lists to facilitate development, administration and QA of staging web sites for E-commerce clients in the home office Data Center.•In charge of maintaining ID Card Access System for a multiple zoned secure building environment.

Bs, Business Management

Computer Science

High School Diploma, College/University Preparatory And Advanced High School/Secondary Diploma Program

High School Diploma, College Prep

Education record