Daniel Holzman-Tweed Email & Phone Number

New York, Ny, Us

Assess solutions for PCI complianceProvide guidance to development and architecture teams regarding issues in providing PCI-compliant solutions

Information and Cybersecurity consulting, fractional CISO

Lake Success, Ny, Us

• Designed and Conducted Application Security Assessments.• Developed and Executed Vendor Risk Management program.• Advised Executive Leadership regarding trends and events in cybersecurity.• Partnered with business leaders to ensure strategic transformation projects aligned to security policies and standards.• Mentored junior Specialists.

Lake Success, Ny, Us

• Founded the Information Risk Management Department as a partner to the Information Security Department to identify and measure information risks.• Ensured the disposition of identified risks aligned to Executive Leadership’s risk appetite and regulatory requirements including HIPAA, HITECH, Meaningful Use, and PCI.• Identified need, recommended strategy, and developed specific programs to address: Vulnerability Management, Remediation Management, Leadership Risk Awareness, HIPAA/Meaningful Use Compliance Assessment, PCI Compliance, Medical Device Security, Threat Intelligence.• Reduced response times to emergent threats and incidents days to hours through Threat Intelligence program.• Designed, staffed, and led the Information Risk Management Team and the Threat Management Team.• Designed and implemented GRC solution to centralize and correlate various Risk Management program activities and information.• Oversaw and performed vulnerability and business process assessments.• Improved efficiency and avoided costs by reviewing vendor selection and optimizing strategic approaches to operational security processes.

Decatur, Ga, Us

Review business requirements and proposed solutions to ensure. Recommend security standards and solutions.

Information Security and Technology Risk management consulting and audit.

Milwaukee, Wi, Us

· Designed and performed audits to meet evolving strategic and tactical customer information security needs.· Mentored other professionals in specific methodologies regarding vulnerability assessment and PCI aassessment· Educated executive and technical audiences through public speaking.

San Diego - Us | Tokyo - Jp, Us

· Reduced personnel requirements through automation of virus handling; management of change requests; credit card transaction clearing; and order processing.· Consolidated costs through identification and elimination of legacy Internet service architectures.· Provided security awareness and training to business unit managers. · Increased security through design and implementation of multi-layer network security architectures for the region. · Implemented security and business measures resulting in elimination of web defacements.· Coordinated corporate anti-virus effort, with groups managing distributed networks matrixed to report to me.· Performed incident response for internal and external security events.· Managed projects and developed security for regional B2B and B2C architectures; security assessments for regional and partner architectures; development of global outsourcing architecture for the customer call center; and regional security policy development.

Tokyo, Jp

AKA Sony Electronics. This entry included for networking purposes.

· Created company's initial security policy and procedure structure with minimal disruption of corporate culture. · Created corporate Internet and extranet services upon separation from parent company. · Expanded corporate disaster recovery plan as company grew.· Established technical and cultural anti-virus defenses. · Implemented Network Intrusion Detection Systems. · Designed and implemented multi-layer security architecture for corporate and production networks. · Successfully promoted security consciousness among the firm's employees.· Administered security services such as firewalls, PKI, and VPN.· Conducted physical, host, and network security assessments.· Provided incident response and forensic analysis of security events.· Researched emerging technologies and identified opportunities to improve its security.· Reported state of security to senior management.

New York, New York, Us

On 12 July 1999, Goldman Sachs purchased The Hull Group. This entry is included for networking purposes.

· Planned and supervised a secure data-center expansion invisibly to our customers. · Implemented migration of corporate e-mail to an SEC compliant solution. · Developed an 8-hour disaster recovery plan. · Designed, installed and administered B2B trading systems.· Managed project assuring Y2K compliance security, production trading systems and software. · Enforced corporate acceptable use policies.· Administered network security architecture.· Provided incident response and forensic analysis of security events.· Mentored junior systems administration staff.

AKA Hull Trading Company. This entry is included for networking purposes.

· Designed and performed a complete redesign of the network, from the wire to the desktop.· Designed, installed, and administered the company's Internet connection and firewall.· Designed, installed, and administered architecture for remote access systems for developers and support personnel.· Administered a multiplatform network exceeding required uptime and performance levels.· Performed server and network monitoring and capacity planning.· Managed network security services.

AKA G-Bar. Included for networking purposes.

AKA G-Bar. Included for networking purposes.

· Accelerated customers’ revenue collection and reduced costs through development of EDI and EFT procedures. · Increased employee efficiency through design and installation of company’s first LAN.· Administered the firm's core business, a medical billing database.

Batavia, Il, Us

I managed the software library of the D0 collaboration at Fermilab.

I converted legacy software to newer computer systems. The high point was writing a GUI in FORTRAN for mouse-equipped DEC VT 320s.

I converted software from a legacy mainframe to a newer VAX infrastructure for the E744/770 colaboration.I was also in this position from July 1989 - September 1989.

I wrote a Macintosh application to read, modify, and write Postscript-based weather maps.

San Francisco, Ca, Us

I interned as a techician at InfoWorld's review lab.

I worked as the database administrator for Bellevue Hospital's model AIDS program.

Ms, Information Security

Ba, Physics

Hs