Daniel Galligan Email & Phone Number

New York, Ny, Us

Paris, Fr

Oversight of PCI compliance program, security awareness initiatives, crisis management process, and data protection initiatives across the Americas Zone.

Paris, Fr

Implementation and oversight of information security program across L'Oréal USA, representing $7.5 billion in revenue at the L'Oréal Group.Local implementation and oversight of information security program across L'Oréal USA, representing $7.5 billion in revenue at the L'Oréal Group. Continued digital security ownership.Monitoring and assessing information security risk across the enterprise, inclusive of digital marketing, e-commerce, and social media channels for a Global 500 CPG entity and the world leader in the beauty and cosmetics segment with a portfolio of over 30 brands in 4 divisions.• Revised and implemented enhanced security policies and improved processes.• Involved in development and implementation of security awareness campaigns.• Security oversight for key legacy move-to-cloud initiatives.

Paris, Fr

Monitoring and assessing information security risk across digital initiatives, inclusive of digital marketing, e-commerce, and social media channels for a Global 500 CPG entity and the world leader in the beauty and cosmetics segment. Focus as trusted advisor to the business.• Successfully reduced overall risk through adoption of security technology and process improvements, including implementation of credit card payment tokenization across all e-commerce sites, encryption and anonymization techniques for PII, and e-commerce and tagging platform change and access governance.• Security design and review of high profile initiatives including CRM big data transformation, AWS cloud data center implementation for B2B and B2C, customer care center engagement platform, loyalty implementation, and DMP deployment.• Full digital stack security oversight, including over 20 e-commerce sites, 200+ e-marketing properties, social media, advertising technology, CRM, mobile, and retail. Key platforms include Demandware, Amazon Web Services, Sitecore, and Salesforce.com.• Performed information risk assessments of new initiatives and vendor relationships impacting digital channels. Provided RFP support for strategic initiatives and routinely presented findings to senior management. Fostered strong relationship with legal.• Ongoing review of changes to e-commerce and oversight of vulnerability remediation.• Revised and implemented enhanced security policies to both address emerging risks and to enhance existing risk assessment processes.• Involved in development and implementation of security awareness campaigns.Consultant, April 2013 - March 2015Manager, IT Security, USA March 2015 - March 2017Manager, IT Security, Americas March 2017 - December 2017Senior Manager, Information Technology Risk and Security, Americas January 2018-present

Paris, Fr

Paris, Fr

Paris, Fr

New York, Ny, Us

Lead senior auditor responsible for day to day management of audit and consulting engagements and oversight of local and international staff on 10-15 concurrent engagements during peak busy seasons for fiscal years ending in Q4 2011 and Q4 2012. Managed complexity and multi-tasked with frequently changing priorities in a high pressure environment from multiple locations and with limited oversight. Involved in budgeting process and held engagements to agreed upon budget.• Performed internal audits of controls surrounding financial processing for a health information services provider, of an outsourced mainframe environment of a hospitality company, and of change management processes for a major professional services firm.• Performed review of processes and controls in place over the quality and integrity of clinical trial data for a major international pharmaceutical company.• Performed information assurance assessment (based on ISO 27002) of an independent medical review organization on behalf of a major international retailer.• Performed IT and application controls testing for a large medical device manufacturer in a complex, decentralized IT environment including JD Edwards, PeopleSoft, and MFG Pro.• Performed a review of security controls surrounding a complex Active Directory environment at a Fortune 50 PBM, including ArcSight SEIM configuration.• Performed general IT controls testing in support of integrated audits of two Fortune 500 retailers and publicly traded clients in manufacturing, pharmaceuticals, and healthcare.• Performed general IT controls testing in support of J-SOX audits of US subsidiaries of a major Japanese cosmetics producer and a major Japanese pharmaceutical company.• Performed general IT controls testing, including application controls, in support of financial statement audits for a financial services firm, several hospitals and health services networks, non-profits, a major international electronics manufacturer, and banks.

St. Louis, Mo, Us

(Medco Health Solutions, Inc. - merged with Express Scripts in 2012)Oversight and management of a vendor security and compliance program for a Fortune 50 pharmacy benefit manager in support of security risk mitigation and HIPAA compliance. • Collaborated with senior stakeholders (including Global Security, Compliance & Ethics, Strategic Sourcing, and Internal Audit) in developing vendor risk management lifecycle.• Performed assessments of security controls for the applications, infrastructure, and facilities supporting critical business functions for business partners and vendors. • Communicated findings for vendors to security and compliance management.• Identified issues in vendor risk and compliance and advised management in the implementation of preventative and compensating controls and processes.• Reviewed business continuity and disaster recovery posture of vendors.Consultant via Interactive Solutions, LLC (now IS Partners, LLC), Horsham, PA

Us

Consultant in the Enterprise Risk Management practice of SMART with a focus on assisting clients by performing IT audit services in support of Sarbanes-Oxley compliance and SAS 70 attestation projects. Client industries have included insurance, healthcare, pharmaceuticals, Internet retail, and technology services.• Developed documentation of controls and processes surrounding clients’ IT environments in accordance with industry standards including COBIT. • Tested design and operating effectiveness of IT General Controls to ensure compliance with Sarbanes-Oxley and in support of SAS 70 attestations.• Tested design of IT controls in support of financial audit of a claims services provider.• Audited diverse IT environments including MAS 500, AS/400, Active Directory, Microsoft Dynamics/Great Plains, Windows Server, SQL Server, and Oracle instances.• Advised clients on improvements to controls environment and operations.• Performed software quality assurance testing for a Fortune 500 healthcare provider.• Performed vendor spend analysis in support of a strategic sourcing initiative.• Tested revenue and payroll processes for a medical transcription service provider.

Walldorf, Bw, De

Developed database for US risk managers housing SAP projects and associated risk management activities. Maintained data and reported using internal SAP Operational Risk Management tool. Maintained US Risk Management presence on internal corporate portal. Assisted in ad-hoc reporting for compliance and in support of internal controls. Compiled quarterly and annual reports and statistics.

Philadelphia, Pa, Us

Supported and repaired student and faculty computers. Maintained computer labs. Assessed security issues and implemented repairs. Assisted in management of helpdesk.

Bachelor Of Science, Decision & System Sciences

Education record