Chris L Email & Phone Number

Elkhart, Indiana , Us

Certified Information Systems Security Professional (CISSP)Certified Information Privacy Technologist (CIPT)Boardroom Certified Qualified Technology Expert (QTE)Responsible for the Cybersecurity and Data Privacy of a publicly-traded, multi-national, Fortune 500company.• Quarterly Cybersecurity updates for the Board of Directors• Program alignment to NIST, Privacy Laws, and requirements of Cyber Insurance Underwriterso Deployed 2nd Line-of-Defense functions for business-level security teamso Improved entity-level controls through policy updates and trainingo Deployed CrowdStrike Complete for monitored Endpoint Detection and Response (EDR)o Deployed CrowdStrike Cloud Security Posture to monitor for Indicators of Misconfiguration (IoM) and Indicators of Attack (IoA) in Azure and Amazon cloudso Centralized patch-management controls and reportingo Attack-surface management and peer-group comparison through BitSightDeveloped and Implemented Privacy Program to comply with US and EU Privacy Law• Web-site compliance with policy, notification, data-collection, and cookie standards• Supplier Compliance with Service Provider/Data Processor requirements of CCPA/GDPR• Supplier compliance with development, hosting, and security standards; monitored through BitSight• Business compliance with Data Subject Access Requests (DSARs)• Standard Contractual Clauses and Supplementary Technical Measures to comply with Schrems II

Mclean, Virginia, Us

Manage 11 associates and 6 off-shore resources in the Mars IS Security Governance, Assurance and Compliance Team. The Mars IS value proposition is based on delivering capabilities to the Business. Mars IS Security Governance ensures that these capabilities are delivered securely, without the administrative burden and delays that erode the underlying value proposition. Currently lead the following function:Audit and Controls• Created and deployed a NIST-based control framework for all of Mars• Created a comprehensive user review process for all Mars SAP instances• Deployed out-of-band termination testing to ensure integrity between all systems of Identity and Authentication• Remediated long-standing issues with Admin Access to Windows Servers. Installed monitoring to ensure issues do not recurPCI• Managed the IT Component of $1BN PCI program, spanning 60+ Business Units• Introduced emerging payment methods for our retail locations (touch pay, phone pay, AliPay, and WeChat)• Developed 3D-Secure standards for impending GDPR requirementsFramework Implementation• Aligned each line of our security budget with NIST to project annual budget’s impact on our NIST score• Wrote the Statement of Applicability, explaining the rationale for where we invested as well as where we did notSupplier Risk Management• Implemented BitSight to improve our Vendor Risk Management Program and create ongoing monitoring of our suppliers• Ensure GDPR controls for Suppliers who process personal data for Mars customers, consumers, and associates• Extended controls to 4th parties who host mars dataMBA from Northwestern University, Kellogg School of ManagementCISSP, CCNA, MCSE, ITIL v3 Foundations, and TOGAF CertifiedCode Security• Created a practice for static code review, based on integration of Veracode with supplier code repositories• Implemented Rapid7 AppSpider for dynamic scanning of custom-code web sites

Mclean, Virginia, Us

• Developed and implemented a reference architecture for Azure Data Centers in US, Germany, and Singapore• Ensured compliance with International Privacy Law, Mars Data Handling Guidelines, Control Objectives, Availability Requirements, and Recovery Requirements.• Created the Reference Architecture for migrations from SAP on Linux/Oracle to Windows/SQL Server in Azure.

Mclean, Virginia, Us

Manage Internet Hosting for 1,500+ B2B, B2C, and Marketing Web Sites for a global CPG company.

Mclean, Virginia, Us

Currently responsible for development of Mars “to-be” overall infrastructure, based on TOGAF framework and ITIL Service Management standards. Evaluate and select new technologies. Define IT requirements; ensure projects’ fitness for purpose, financial benefit, and long-term strategic alignment.• Currently aligning Mars Business-Service-Catalogue process with the ITIL Service Management Strategy. Writing RFP for all WAN, Security, and Remote-Access services.• Designed and deployed a clientless access solution in alignment with Wrigley’s co-manufacturing strategy.  Achieved compliance with Wrigley’s control objectives, European Union privacy legislation, and German employment laws.  Brought 40+ external manufacturers on line with $130+ million incremental annual revenue and $8.5 million in annual cost savings.• Implemented a globally distributed, regional deployment of MS Office SharePoint Server (MOSS) 2007; collected business requirements to align with services offered by SharePoint.• Led a team of Wrigley solution engineers during development, testing, and deployment of a federated search between SharePoint (MOSS 2007) and SAP Enterprise Portal 7 (EP7).  Used Web Services and Services Oriented Architecture (SOA) technology. Delivered over 175 solutions during the first year of the platform. Network effect of 3rd Party Access and SharePoint led to $5.5 million in annual savings, through the outsource of several departments.• Delivered a mobile retail-execution and analytics platforms for global field sales force. Produced lift analysis from retail data that led to $61 million of increased sales, annually, in key geographic areas and $8.75 million in annual cost savings. Leveraged this information, successfully fended off competitor entry in key markets.

Promoted to Security Architect based on exceptional performance as Portal Manager. Developed Wrigley’s first IT security team; including hiring, training, and mentoring of three security engineers. • Developed IT Security Roadmap and led projects to deploy IT security landscape.• Led Sarbanes-Oxley IT infrastructure audit-process for the global IT organization.• Made key contributions during development and business ratification of global IT security policies (based policies on ISO 17799 and Architecture on ISO 27001).• Developed security framework for Wrigley’s Global Active Directory (AD) deployment.• Assumed the role of Forrest Owner for the Global AD.• Developed business case for Wrigley’s participation in the Children’s Advertising Review Unit: Worked with corporate communications and global marketing to assure compliance with the Children’s On-Line Privacy and Protection Act (COPPA).

Design, deploy, and support the e-business infrastructure for the company's intranet and extranets.

Infrastructure Manager for a b2b dot com. Company failed in March 2001.

Mba, Marketing, Analytic Consulting, Technology Management And Management & Strategy

Business, Computer Science, Accounting