Chris Won Email & Phone Number

New York, Ny, Us

New York, Ny, Us

Toronto, On, Ca

o Led a team of 10+ individuals to develop and document technical security controls to address the Cybersecurity Maturity Model Certification (CMMC) practice requirements, NIST 800-53, contractual security requirements, firm policy requirements, and other regulatory requirements (major telecommunications company).o Oversaw the full controls development lifecycle - from controls development (with 1st LoD), to refinement of control language and assigning control owners, to upload into the GRC tool (Archer), to periodic monitoring and testing of the controls within the GRC tool, and to archiving controls.o Developed and established ongoing dashboards and reporting (via Azure DevOps) on controls development activity as well as status on controls testing and monitoring.o Advised on general CMMC/NIST 800-171 compliance strategy and activity including system scoping, boundary analysis, defining CUI in the environment, SSP and POAM development, and interpreting the CMMC requirements.o Oversaw multiple varying workstreams in parallel to drive utilization, enhance productivity, and increase efficiency while reaching target goals.o Established a new program to identify and monitor security compliance to requirements stated in Government contracts within the Salesforce contract life cycle management tool. (Major telecommunications company)o For a major technology company, worked to assess, document, implement, and remediate new technical controls and processes to address security requirements from a highly confidential agreement with US Government agencies (CFIUS)

Toronto, On, Ca

o Served as a project manager to implement several major Cyber security workstreams at a major international bank to maintain compliance to the regulatory environment and to enhance the bank's Cyber security posture.o Provided hands-on keyboard expertise at the Security Operations Center for a major international investment bank; investigating and escalating suspicious activities as well as reporting of incident metrics to senior leadership and recommending further enhancements.o Executed an Information Security current and future state review for a number of financial services firms. Identified areas of further improvement and developed roadmaps and project charters for remediation of those gaps.o Performed a NY DFS 500 compliance assessment for a number of financial services firms, where I identified the entity’s current alignment to the regulation and reviewed the gaps against the regulatory requirements in order to define the remediation plan. Furthermore, I managed and executed tasks to address the gaps and risks (i.e., Cybersecurity Program document development (DFS 500 Section 500.02 requirement)).o Conducted a policy gap analysis to NIST SP 800-53 Rev. 4 for an international bank to identify opportunities for improvement in their policies.o Assisted in the development of an Incident Response Plan and 5 Incident Response Playbooks (DDoS, Insider Threat, Advanced Persistent Threat, Malware, and Data Leakage).

Toronto, On, Ca

Gb

o Scripted (Visual Basic Advanced) a macro-enabled workbook to manage and monitor user activity/incidentso Scripted (Visual Basic Advanced) a macro-enabled workbook for a major tax firm to send emails to Partners and Responsible parties regarding access lists for their clients.o Scripted (Visual Basic Advanced) a macro-enabled workbook and a script (JavaScript) on Google Sheets for a major professional services firm to automate tasks involving a mass volume of data related to SEC regulationso Assisted in the development of a security services catalogue for a major professional services firmo Conducted a security assessment on a product for a major telecommunications company utilizing various tools from Kali Linux, such as Wireshark, and Burp Suiteo Developed a DLP requirements build to be used for vendor selection analysis by considering the five DLP components (Content Detection, Reporting Engine, Data in Motion Vector, Data at Rest Vector, Data in Use Vector)o Researched the capabilities and inquiries of the following DLP vendors: Digital Guardian, Intel Security, Forcepoint, and Symanteco Created and maintained client-specific security controls implementation guides on various technological tools (Intel Security DLP/VirusScan/SiteAdvisor, Websense DLP, BlueCoat, Avecto), which includes assistance on how-to implement the email whitelist, blocking of certain IM clients/web browsers, and setting of keywords listo Responded to inquiries related to the implementation of the security controls from territories such as Hong Kong, Japan, Brazil, Australia, Cyprus, United Kingdom, and Singapore

o Assisted graduate students enrolled in "Statistics for IT Managers" at Carnegie Mellon Universityo Upheld academic integrity through proper grading and documentation of student assignments and examso Held office hours to teach topics (topics include descriptive statistics, probability, hypothesis testing, and regression)

Gb

o Worked in the Technology, Information, Communication and Entertainment media (TICE) vertical and IT Security, Privacy and Risk horizontal.o Assisted the team with developing and implementing a security strategy for a major telecommunications company.o Utilized Microsoft Word to create security tutorials for the client’s employees.o Conducted log analysis of the inbound and outbound traffic within the client’s network to identify vulnerabilities.o Researched various information security related topics to assist the team.o Developed informative wiki pages on various information security topics such as SHODAN, and Project Sonar.

o Assisted the staff with general administrative tasks, such as filing of confidential documents, data entry, and responding to inquiries from prospective students.o Learned valuable skills regarding office etiquette, worker responsibility, and time management.

Menlo Park, Ca, Us

o Responsible for sifting through client lists to update and upload client specific data into the company’s database.o Learned valuable skills regarding attention to detail, and patience.

Cedar Rapids, Ia, Us

o Responsible for contacting alumni to update their demographic information and toprimarily ask for their participation through contributions or gifts for the CarnegieMellon University Fund.o Raised approximately $50,000 for the fund.o Learned valuable skills regarding negotiation, persuasion, and conversation.

Bogotá D.C., Bogotá, Co

o Applied, interviewed, and awarded a Fellowship to spend the summer in Bogota,Colombia to do consulting work for Externado University.o Evaluated a medium-sized audio/video company, Tribu70, in an effort to identifyproblems and propose solutions.o Dealt with problems regarding the organizational structure and corporate strategy ofTribu70 and various other companies, which were the primary areas that we believeneeded improvement.o Learned the process in identifying problems and solutions within a company, andthe etiquette and professionalism required throughout the process.

San Diego, Ca, Us

o Provided teaching assistance to the homeless preparing for the GED.o Assisted the assessment center with clerical work, which helped distinguish patientswith disabilities.o Provided assistance to employees with their work regarding document managementfor the Program, as well as preparing orientation packets for incoming patients.o Contributed over 400 hours of volunteer work at the Program.

Master'S Degree, Information Systems Management

Bachelor Of Science (B.S.), Policy And Management