Dave Vanaman Email & Phone Number

Philadelphia, Pa, Us

Chalfont, Pa, Us

Spearheads compliance audits such as ISO 27000, SOC2, and NIST. Creates, updates, and maintains policy and procedure documentation to ensure compliance with ISO and NIST standards. Steers continuous improvement initiatives to identify, investigate, and improve tools, processes, and tasks.Provides cyber security consulting for software and application development for internally developed software products. Created and manages a Business Analytics program to collect, collate, and analyze cross-department data to assist in providing data insights for Sales, Production, Development, R&D, and Customer Care departmentsHeads Information Security Council to steer division activities relating to cyber and information risks, regulations, contractual requirements.

Chalfont, Pa, Us

Spearheads division preparation, information gathering, process and policy improvements, and compliance for third party compliance audits such as SOC2 and ISO 27001 and internal assessment auditing and testing. Creates, updates, and reviews policy and procedure documents to further cyber security maturity and framework compliance. Responds to third party risk assessments and integration questionnaires. Coordinates with customer IT and security teams to assist in integrating JBT products into their existing systems and requirements as well as performing internal risk assessments for internally developed software and IT systems utilizing frameworks such as Octave, NIST CSF, and DOE C2M2Created and maintains application cyber security plan to support industrial technology (OT) software development for a server to multi vehicle automated system. This includes performing cyber security code evaluations to identify potential vulnerabilities and non-compliance prior to software release. Assists in code testing and evaluation for functional and unit testing prior to release. Heavily involved in test plan and process improvements for new software and tools to strengthen and streamline the testing process. Created and heads Information Security Council for JBT Automated Systems Division to facilitate cross-department communication, planning, and information sharing to improve security and effectiveness across the division

Reston, Virginia, Us

Upgrade, maintain, and administer a fully networked development environment in support of the customer's mission critical environment. This test environment is used to evaluate new software, hardware, and configuration changes prior to adoption on the production network. New features would be thoroughly tested and installation, troubleshooting, and pitfalls documented for rapid deployment to minimize downtime on the production environment Tasks and projects include:-Utilize WSUS/SCCM to manage updates to Windows and other software-Create, maintain, and administer VMs, resource pools, and hypervisors using Citrix Hypervisor-Implement TLS/SSL certificates for a PKI infrastructure-DISA STIG and NIST compliance-Identify and remediate security vulnerabilities utilizing Rapid7 InsightVM-Maintain and update a mixed domain of Windows Server (2012r2, 2016, 2019), Windows desktop (8.1 & 10), and Linux (CentOS) machines-Update, organize, and maintain Active Directory Group Policy Objects (GPO) to match and maintain a secure baseline-Test installation and operation of programs including developmental software to ensure functionality and interoperability.-Create and update documentation and instructions

Volunteer leader of PCT ISA, a student organization dedicated to learning, exploring, and teaching others about cyber and physical security tools and best practices. -Ran weekly meetings-Contacted and facilitated speaking engagements and one-on-one Q&A sessions with industry professionals and students. -Consulted on degree curriculum changes and continual improvement with PCT department chair-Planned, obtained funding for, and lead group trips to attend multi-day, out of state industry conferences-Planned and ran fund raising activities-Taught workshops and classes

AAA certified Roadside Problem Solving Technician -Provided direct customer service and roadside assistance including lockout, jump-start, tire change, winch-out, and towing services.-Provided on-site and remote diagnostics, troubleshooting, and light repair.-Handled on-call, centrally dispatched, and self scheduled ticket triage and evaluation for priority based queuing or re-dispatch.

Provided business to business and retail sales: sold automotive parts and accessories to service garages, secondary sellers, and the retail public. Interpreted customer requirements and provided recommendations on applicability of products for applications based on factors such as budget, brand preference, availability, and warranty.Coordinated ordering and delivery from multiple suppliers and warehouses.Maintained on site inventory including ordering, setting and maintaining stocking levels.

Raleigh, Nc, Us

Provided Business to business and retail sales: sold auto parts and accessories to the retail public, repair garages, secondary sellers, and service stations. Maintained inventory including tracking inventory, confirming stock levels and needs, shrink management, and ordering stock to maintain company determined levels.Trained new employees and furthered staff education, skills advancement, and job promotion.Created employee scheduling in accordance with company policies.Handled cash accountability including register audits and deposits.Promoted to Assistant Store Manager.

Bachelor Of Science - Bs, Computer And Information Systems Security/Information Assurance

Information Technology Auditing & Cyber Security, Auditing