Rob Chavez Email & Phone Number

Alexandria, VA, US

Gatineau, Québec, CA

• Conducts in-depth analysis to evaluate and assess client comply with defined standards and regulations such as PCI DSS and NIST Cybersecurity Framework (CSF). Gathers information to generate detailed, high-quality.
• Provides expert advice, recommendations, and findings to clients as well as monitored work progress towards resolution and compliance.
• Adheres to industry security and compliance standards while executing detailed audits and risks assessments.
• Consults with customers on risk management, security controls, and vulnerability mitigation.Accomplished and results-driven professional with comprehensive experience in ensuring and maintaining information security.

Chicago, Illinois, US

• Conducts in-depth analysis to evaluate and assess client comply with defined standards and regulations such as Payment Card Industry Data Security standards, ISO 27000 series, and NIST 800-53. Gathers information to.
• Provides expert advice, recommendations, and findings to clients as well as monitored work progress towards resolution and compliance.
• Adheres to industry security and compliance standards while executing detailed audits and risks assessments.
• Consults with customers on risk management, security controls, and vulnerability mitigation.

Alexandria, VA, US

• Guaranteed smooth running of IT security operations by monitoring and supporting IT-related security, data privacy, regulatory and compliance functions across the organization. Led in-depth review and follow-up on all.
• Defined and promoted corporate security vision by consistently interacting and communicating with peers and business leadership.
• Supported IT security and data privacy protection operations by strategizing and planning budget items.
• Formulated and employed plans to protect data against modification, destruction, or unauthorized disclosure.
• Headed overall functions related to the execution and management of security awareness training program and vendor risk management program.
• Wrote and updated all SHRM security and privacy policies and achieved PCI DSS compliance for SHRM.

Palo Alto, CA, US

• Rendered expertise as an IS security engineer; provided support to the firm's technical security controls for partners, associates, and clients.
• Leveraged technical expertise and knowledge while installing and configuring five new Palo Alto Next-Gen firewalls for firm satellite offices.
• Managed and maintained the firm's information security management service framework through auditing and verification of the applicable ISO 27001 controls.
• Oversaw security settings for the firm's document management system, Accellion and maintained email hygiene engine by responding to and examining phishing alerts.
• Initiative and completed preventive, scheduled, and warranty required maintenance on Palo Alto firewalls, LogRhythm SIEM, and Web Content Filtering system.

Washington, DC, US

• As a Senior Security Specialist at the Association of American Medical Colleges (AAMC), I steered in-depth analysis to evaluate and assess violations of computer security procedures and devised mitigation plans to.
• Introduced an updated security vulnerability management program that reduced security vulnerabilities by 70%.
• Delivered expertise as an Infrastructure Security Team manager after the retirement of Senior Director.
• Studied and reviewed computer virus reports to identify time to update virus protection systems.
• Uncovered potential vulnerabilities by initiating and completing security audits.
• Safeguarded private data by building firewalls and encrypting data, also suggested improvements in security systems and procedures.

Washington, DC, US

San Jose, California, US

Master Of Professional Studies In Technology Management, Information Security/Information Assurance

Bs, Computer Information Systems - Security Focus