Lauren Dean Email & Phone Number

- Provides expert consulting and advisory services to clients on internal controls, technology operations, compliance, privacy, and security- Leads client implementations and maintenance of controls and processes, ensuring compliance with recognized control frameworks (e.g., PCI, SOC1, SOC2)- CMMC Registered Practitioner

Kansas City, Missouri Area

- Drafted Assessment & Authorization documentation using the NIST Risk Management Framework,ensuring compliance with federal Agency contract requirements within the NIST CSAM tool- Managed the enterprise-wide policy and procedure review process, enhancing overall security posture- Pioneered the Agency’s first Authority to Operate as a Service client offering, leading to increased client satisfaction and revenue- Collaborated with system and control owners to document… Show more - Drafted Assessment & Authorization documentation using the NIST Risk Management Framework,ensuring compliance with federal Agency contract requirements within the NIST CSAM tool- Managed the enterprise-wide policy and procedure review process, enhancing overall security posture- Pioneered the Agency’s first Authority to Operate as a Service client offering, leading to increased client satisfaction and revenue- Collaborated with system and control owners to document finding remediations, improving overall security and compliance posture- Supported the annual FedRAMP assessment and various external Service Organization Controls Reports (SOC1) audits, ensuring compliance with industry standards- Created and optimized the department's Standard Operating Instructions- Obtained High Risk Public Trust clearance Show less

Kansas City, Missouri

- Performed control testing for Sarbanes-Oxley (SOX) Section 404, Service Organization Controls Reports (SOC1), and cyber security assessments, in accordance with the DST Systems Inc. Internal Audit plan- Interviewed business leaders to understand processes behind in-house developed applications and vendor-provided applications, while identifying areas of risk in logical access, change management, and system integrations- Recommended remediation plans to clients in accordance… Show more - Performed control testing for Sarbanes-Oxley (SOX) Section 404, Service Organization Controls Reports (SOC1), and cyber security assessments, in accordance with the DST Systems Inc. Internal Audit plan- Interviewed business leaders to understand processes behind in-house developed applications and vendor-provided applications, while identifying areas of risk in logical access, change management, and system integrations- Recommended remediation plans to clients in accordance with industry best practices, DST security policies, and control standards- Communicated with all levels of management across various business units (IT Development, Healthcare & Pharmacy, and Financial Services)- Executed in-depth security audits within areas of vulnerability and patch management, data center operations, business continuity, and disaster recovery- Assisted with facilitation of external federal audits and ongoing DST client audits Show less

Springfield, Missouri Area

- Interpreted security control frameworks, Federal laws, and University policies inthe development of security program strategy to govern risk management procedures and techniques to meet regulatory requirements- Researched industry standards and mandates including HIPAA, GLBA, and PCI-DSS, to provide information for the purposes of security management and policy development- Fulfilled information assurance program requests in a large enterprise environment including conducting… Show more - Interpreted security control frameworks, Federal laws, and University policies inthe development of security program strategy to govern risk management procedures and techniques to meet regulatory requirements- Researched industry standards and mandates including HIPAA, GLBA, and PCI-DSS, to provide information for the purposes of security management and policy development- Fulfilled information assurance program requests in a large enterprise environment including conducting FISMA (NIST 800-53) and security audits on University systems- Researched and drafted documentation of security topics and processes to assist executive decisions- Oversaw the management of pilot projects for the evaluation of security-specific products and systems Committees and Memberships- Served as a consultant to the Information Security Executive Committee, providing input on regulatory information resources - Served on the Cyber Security Incident Response Team, investigating security incidents and recommending corrective actions to prevent recurrence- Served as a member of the Information Security Operations Team, evaluating information security issues and making recommendations for protecting University data and computer systems through policy, awareness, incident response, and resource planning Show less

Bachelor Of Science (B.S.), Information Technology Service Management

Activities and Societies: Delta Sigma Pi, CRU

General Education