Christopher Boon Email & Phone Number

Omaha, Ne, Us

• Engagement Manager, engagement support and/or subject matter expert (SME) for multiple client engagements in various industry verticals including insurance, fin-tech, manufacturing, financial services, transportation & logistics, and communications.• Engagements included:GRC Transformation - Information Security framework, methodology, policy, standard and control creation for cybersecurity requirements and baselines; Cybersecurity gap assessments against frameworks (NIST, CSF, CIS… Show more • Engagement Manager, engagement support and/or subject matter expert (SME) for multiple client engagements in various industry verticals including insurance, fin-tech, manufacturing, financial services, transportation & logistics, and communications.• Engagements included:GRC Transformation - Information Security framework, methodology, policy, standard and control creation for cybersecurity requirements and baselines; Cybersecurity gap assessments against frameworks (NIST, CSF, CIS, SOC2, FedRAMP, CMMC, etc.) with roadmaps to operationalize recommended improvements; Cybersecurity audits; Regulatory gap assessments and/or preparedness evaluations prior to examination or certification; GRC Transformation - Information Security framework, methodology, policy, standard and control creation for cybersecurity requirements and baselines.• Building of partnerships by conducting risk assessments and technical testing, identifying security weaknesses in client systems, and providing strategic recommendations to deal with vulnerabilities and enhance overall cyber security posture. Show less

Omaha, Nebraska, United States

- Manager of Internal Audit engagements to include manufacturing operations, Cybersecurity, SOX ITGC and Data Management best practices - Participate in strategic business consulting and management requests related to pre & post system implementations, third party risk management and joint venture risk assessments- Manage internal strategy and improvements for data analytics and automation, risk & control optimization and holistic technology modernization and innovation-… Show more - Manager of Internal Audit engagements to include manufacturing operations, Cybersecurity, SOX ITGC and Data Management best practices - Participate in strategic business consulting and management requests related to pre & post system implementations, third party risk management and joint venture risk assessments- Manage internal strategy and improvements for data analytics and automation, risk & control optimization and holistic technology modernization and innovation- Established rapport and collaborated with peers, business partners and senior leadership to identify and manage risks across the organization Show less

Omaha, Nebraska

- Direct lead for off-shore and on-shore outsourced operational services to included Third Party Risk Management and Production Control teams.- Program Manager for the Third Party Cyber Risk Management program. This program includes cyber risk management and remediation of third party risk findings, risk assessment and analysis for business units and senior management for inherent risk insights for operational decisions. Additionally, the program is responsible for on-site assessments of… Show more - Direct lead for off-shore and on-shore outsourced operational services to included Third Party Risk Management and Production Control teams.- Program Manager for the Third Party Cyber Risk Management program. This program includes cyber risk management and remediation of third party risk findings, risk assessment and analysis for business units and senior management for inherent risk insights for operational decisions. Additionally, the program is responsible for on-site assessments of strategic business partners and vendors.- Lead analyst for the overall GRC program. Responsibilities of this position include: Creation, completion and reporting for the annual IT Risk Assessment Creation and governance of all Cybersecurity policies, standards and exception management. Information Technology liaison for all Internal and External Audit ITGC's and issue remediation management.- Lead for Production Control team: Administration of CyberArk for all privileged access management across the enterprise. Completion of all Access Certifications across the organizations for scoped applications for all users and roles, privileged access, third party access, business-to-business (B2B) data connections and system level access controls. Show less

Greater Omaha Area

- Lead complex, large and/or sensitive audits of information systems and controls including but not limited to application security & development, business control processes, change control management procedures, database configurations and security, network design and security, and information security best practices for computer and data center operations. - Assist in developing and leading ACI’s IT Internal Audit Function, under the direction of the IT Internal Audit Vice President and… Show more - Lead complex, large and/or sensitive audits of information systems and controls including but not limited to application security & development, business control processes, change control management procedures, database configurations and security, network design and security, and information security best practices for computer and data center operations. - Assist in developing and leading ACI’s IT Internal Audit Function, under the direction of the IT Internal Audit Vice President and the Internal Audit Senior Vice President / Chief Audit Executive. - Responsible for the completion and quality of work papers for the team and expediting all stages of the writing and review of reports, which accurately reflect facts and recommendations of an objective appraisal of the area audited. - Perform Risk Analysis to identify and test efficiency and effectiveness of controls related to areas of audited risk.- Provide recommendations to senior management on IT related controls and best practices.- Collaborate with clients both internal and external to the organization.- Lead the completion of the annual SOX IT control testing and SSAE 18 testing for ACI's SOC 1 and SOC 2 narratives.- Collaborate with external auditors and federal regulators.- Archer GRC Administrator Show less

Greater Omaha Area

- Evaluated complex information systems and controls including but not limited to applications, business control processes, change control management procedures, security, networks, computer and data center operations. - Conducted audits and provided independent assessments of operational, financial, and/or systems across all of ACI's divisions and functions to evaluate the adequacy of internal controls and deliver audit reports that add value to the area audited. - Responsible for the… Show more - Evaluated complex information systems and controls including but not limited to applications, business control processes, change control management procedures, security, networks, computer and data center operations. - Conducted audits and provided independent assessments of operational, financial, and/or systems across all of ACI's divisions and functions to evaluate the adequacy of internal controls and deliver audit reports that add value to the area audited. - Responsible for the completion and quality of work papers.- Performed risk analysis to identify and test efficiency and effectiveness of controls related to areas of audited risk.- Provide recommendations to senior management on IT related controls and best practices. - Collaborated with clients both internal and external to the organization. Show less

Greater Omaha Area

- Responsible for operating, maintaining, and defending the confidentiality, integrity and availability of USSTRATCOM's critical networks. - Provide network operations and maintenance for critical network defense infrastructure. - Monitor equipment and configurations, anomalous activity, network intrusion attempts and other malicious network events. - Monitor, detect, analyze, and respond to network defense incidents. - Review, interpret, log and act upon cyber intelligence… Show more - Responsible for operating, maintaining, and defending the confidentiality, integrity and availability of USSTRATCOM's critical networks. - Provide network operations and maintenance for critical network defense infrastructure. - Monitor equipment and configurations, anomalous activity, network intrusion attempts and other malicious network events. - Monitor, detect, analyze, and respond to network defense incidents. - Review, interpret, log and act upon cyber intelligence reports as necessary. - Review and respond to SPAM reported by users. - Maintain domain antivirus support systems. - Initiate incident response & handling, and assist with forensic analysis. - Monitor and use network security systems to include Palo Alto Firewalls, IBM Proventia IPS, Cisco Soucefire IDS, RSA Security Analytics deep packet inspection, Gigamon network taps, Riverbed and Wireshark traffic analysis, Cisco Ironport email content scanner, QRadar SIEM, SolarWinds network monitoring, and McAfee ePO. - Perform Tier ll and Tier lll troubleshooting and minor information assurance decisions. - Documenting of daily events with detailed accuracy to inform coworkers and leadership on events for improved situational awareness and defensive posture. Show less

Greater Omaha Area

- Responsible for monitoring USSTRATCOM's network status and implementing escalation notification procedures while operating and administering complex network management tools and network devices. - Configuration, implementation, monitoring, and maintenance of system baselines.- Performed Tier II and Tier III troubleshooting of network anomalies.- Administration of Network Firewalls.- Conducted performance analysis and QoS on network Firewalls.- Performed advanced Cisco… Show more - Responsible for monitoring USSTRATCOM's network status and implementing escalation notification procedures while operating and administering complex network management tools and network devices. - Configuration, implementation, monitoring, and maintenance of system baselines.- Performed Tier II and Tier III troubleshooting of network anomalies.- Administration of Network Firewalls.- Conducted performance analysis and QoS on network Firewalls.- Performed advanced Cisco switch and router configurations for both IOS and Nexus operating systems.- Administered Cisco high availability campus networks to ensure availability meets performance thresholds.- Performed installations and implementation of complex network solutions and hardware.- Performed requirements analysis, functional analysis, and synthesis of network requirements using Cisco and other vendor equipment/software.- Analyzed network performance and configured network to maximize performance and meet performance thresholds.- Performed disaster recovery procedures.- Performed required documentation of controls.- Implemented network security procedures and mitigate network vulnerabilities.- Managed and analyzed network security, stability and performance with Palo Alto Firewalls, SolarWinds, QRadar, Gigamon, Riverbed network analyzers, DNS, DHCP, and ACL's.- Maintained network configuration management. Show less

La Vista, Ne

- Enforced the city ordinances and state laws in the City of La Vista, NE. - Conducted patrol for proactive involvement in community policing and crime deterrence.- Responded to calls (emergency and non-emergency) regarding order maintenance, criminal law, and specialized service. - Investigated traffic accidents. - Took reports regarding criminal activity and assisted with civil complaints.- Investigate misdemeanor and felony crimes that occurred within established… Show more - Enforced the city ordinances and state laws in the City of La Vista, NE. - Conducted patrol for proactive involvement in community policing and crime deterrence.- Responded to calls (emergency and non-emergency) regarding order maintenance, criminal law, and specialized service. - Investigated traffic accidents. - Took reports regarding criminal activity and assisted with civil complaints.- Investigate misdemeanor and felony crimes that occurred within established jurisdictions.- Detained and arrested suspects for violations of criminal law.- Testified in county and district court for appropriate criminal justice due process.- Additional Training and Duties Include: Field Training Officer, Nebraska State Firearms Instructor, Nebraska Patrol Rifle Instructor, Active Shooter Instructor, AR-15 Platform Armorer, Cruiser Fleet Assistant, Digital Ally Administrator, Officer In Charge on Selected Deployments Show less

Fremont, Ne

- Enforce the city ordinances and state laws in the City of Fremont, NE. - Conduct patrol for proactive involvement in community policing and crime deterrence. Responded to calls regarding order maintenance, criminal law, and specialized service. - Investigated traffic accidents. - Took reports regarding criminal activity and assisted with civil complaints. - Investigated misdemeanor and felony crimes that took place within established jurisdictions. - Detained and… Show more - Enforce the city ordinances and state laws in the City of Fremont, NE. - Conduct patrol for proactive involvement in community policing and crime deterrence. Responded to calls regarding order maintenance, criminal law, and specialized service. - Investigated traffic accidents. - Took reports regarding criminal activity and assisted with civil complaints. - Investigated misdemeanor and felony crimes that took place within established jurisdictions. - Detained and arrested suspects for violations of criminal law.- Testified in county and district court for appropriate criminal justice due process.- Selected to police in several capacities including: Emergency Response Unit (SWAT) Operator, Motorcycle Patrol Officer, Bicycle Patrol, Property Officer, Adopt-A-Cop, Interview and Interrogation Certification, Field Training Officer, Nebraska State Firearms Instructor, Nebraska Patrol Rifle Instructor, Glock Factory Certified Armorer, Officer In Charge (as needed basis). Show less

Omaha, Ne

Investigated Subrogation Claims for Health Insurance Companies. Communicated with business clients in reference to subrogation claims, multi-state laws, and organizational policies. Supported Recovery Specialist for monetary payment of funds regarding legitimate health insurance liens.

Master Of Science (M.S.), Management Information Systems / Information Security

GPA 4.0

Public Administration

12 graduate hours in Master’s of Public Administration (MPA) studies from the University of Nebraska at Omaha. The studies completed in my.

Bachelor Of Science (B.S.), Criminal Justice