David Bernard Email & Phone Number

Memphis, Tn, Us

Memphis, Tennessee, Us

• Develop, implement and monitor a comprehensive enterprise cyber security program to ensure that the integrity, confidentiality and availability of information that is owned, controlled or processed by the organization.• Builds, manages and mentors a team of Security Engineers.• Safeguard all parts of the TruGreen technology landscape from digital threats and data breaches.• Integrate Information Security risk management into business decisions and operations.• Advise leadership on necessary security controls and processes to protect the enterprise and the business units commensurate to the assessed level of risk.• Develop, maintain and publish up-to-date cyber security policies, standards and guidelines. Oversee the approval, training and dissemination of security policies and practices.• Develop and manage the cyber security budget.• Coordinate cyber security projects with resources from IT and business unit teams.

Memphis, Tennessee, Us

Memphis, Tennessee, Us

Responsible for PCI Compliance, conducting technical security tests and evaluations; advising business partners on Information Security requirements and processes; and performing technical risk assessments of IT systems.• Lead investigations and incident response activities, including documentation, analysis and remediation of security incidents.• Manage PCI Compliance, Penetration Testing, Perform ASV scanning.• Provide quarterly AOC documentation to our credit card vendors• Create and run Internal spear phishing campaigns through Azure o365• Security Center Azure o365 experience: Conditional Access policies, Azure AD• Manage and oversee all evidence requests related to PCI Compliance for 3rd party QSA• Serves as the lead technical information security reviewer of requirements statements, feasibility analyses, operating procedures, and other documents produced during the systems development process.• Direct the selection, installation, and administration of automated tools that enforce or monitor the compliance with information security policies, procedures, standards, and similar information security requirements.• Performs installation and configuration management of security systems and applications, including policy assessment and compliance tools, network security appliances and host-based security systems• Performs threat and vulnerability assessments, in some cases followed by appropriate remedial action, to ensure that systems are protected from known and potential threats and are free from known vulnerabilities• Collates security incident and event data to produce monthly exception and management reports• Develops and maintains documentation for security systems and procedures• Participates in infrastructure projects to develop, plan and implement specifications for network and distributed system security technologies in support of key information systems

Responsible for conducting technical security tests and evaluations; preparing detailed security certification and accreditation documentation; advising business partners on Information Security requirements and processes; and performing technical risk assessments of IT systems.• Assists with investigations and incident response activities, including documentation, analysis and remediation of security incidents.• Serves as a technical information security reviewer of requirements statements, feasibility analyses, operating procedures, and other documents produced during the systems development process.• Assists with the selection, installation, and administration of automated tools that enforce or monitor the compliance with information security policies, procedures, standards, and similar information security requirements.• Redesigns and reengineers internal information handling processes to ensure protection from a variety of threats to information security, including unauthorized disclosure or use, inappropriate modification, premature deletion, and unavailability.• Monitors current and proposed laws, regulations, industry standards and ethical requirements related to information security and privacy.• Performs installation and configuration management of security systems and applications, including policy assessment and compliance tools, network security appliances and host-based security systems• Performs threat and vulnerability assessments, in some cases followed by appropriate remedial action, to ensure that systems are protected from known and potential threats and are free from known vulnerabilities• Collates security incident and event data to produce monthly exception and management reports• Develops and maintains documentation for security systems and procedures• Participates in infrastructure projects to develop, plan and implement specifications for network and distributed system security technologies in support of key information systems

Houston, Texas, Us