Deb Bond Email & Phone Number

Phoenix, Az, Us

Pittsford, Ny, Us

As part of my work to support clients as they build and manage a secure environment, I: Build and foster strong and positive client relationshipsSupport requests to review, update, and create security related documentation;Conduct PCI v3.2.1 and v4.0 assessmentsConduct internal ISO 27001 auditsSupport execution and oversight of SOC 2 auditsConduct NIST based risk assessments, readiness assessments, and gap assessments

Taking a break to recharge.

Scottsdale, Arizona, Us

Build Compliance and Information Security programs to include employee security awareness training.I am the face of the Information Security Governance and Compliance programs. - Implement and manage company-wide security awareness and secure coding training programs- Implement and manage PCI compliance program and oversee the annual PCI audit- Build and maintain PCI continuous monitoring program- Identify compliance gaps and respond to audit queries- Create and execute roadmap to obtain SOC1/SOC 2 - Build, manage and maintain vendor risk management program- Develop and maintain the company's ISMS.- Oversee program and project management within Information Security- Lead third-party risk assessments with external business partners - Work with control owners to ensure testability of controls and regularly validate that control activities are being performed according to schedule.- Oversee and drive remediation processes to address control issues- Proactively identify existing and emerging IT risks- Monitor IT processes and system configurations to ensure compliance - Assist in the development, performance and organization of periodic access reviews- Provide IT Management with status and reporting related to compliance risk & controls effectiveness- Assist in standardizing IT general controls across applications

Knoxville, Tennessee, Us

Plan and conduct PCI (Payment Card Industry) readiness exercise projects and PCI Compliance Assessments for mid to large enterprises, with a primary focus on building strong, transformational relationships. As a trusted resource, I provide my clients with real world solutions for their unique compliance requests. Assist Managing Director with oversight of the PCI SSC AQSA program which provides mentoring and leadership for professionals who desire to learn the skills needed to become a PCI-QSA.As a cybersecurity SME, I conduct a variety of activities including information security assessments, compliance audits, gap analysis, readiness assessments, process runbooks and playbooks to align customer data management with business strategy and regulatory requirements. I construct unbiased pictures of the security posture for independent brands.• Conduct contract reviews and risk assessments for applications recently migrated to the client’s private on-premises cloud environment.• Invited to extend consulting stay based on cloud-environment assessment work; conduct and review numerous Veracode scans and scrubbed information security playbooks.My collaborative, flexible and transparent approach with clients resulted in very positive and supportive relationships, many of which clinched repeat and/or additional business opportunities.

Worked closely with clients to understand and articulate their business requirements and propose relevant and innovative security solutions across multiple security domains and technologies to help reduce their overall security risk. • Assessed potential threat risks to highly sensitive data. Helped the business identify, develop, and assist in the implementation and monitoring of security solutions.• Created customer documentation including as-built documentation, diagrams, playbooks, metrics, policies, procedures, standards, and other support information.• Invested time in security research to stay up to date on current and evolving threats. Continued education in learning and providing expert-level advice on security solutions across multiple domains and technologies.

Walnut Creek, Ca, Us

Handled the 'R' in GRC and loved it! (Contract Position)Assessed risks on self-reported issues from the business; managed full lifecycle for assigned risk areas from identification to remediation and closing.• Conducted application risk assessments to validate compliance with internal security policies.• Built metrics and reporting framework in Archer.

San Jose, California, Us

Oversaw compliance audits including PCI, SOC 2, and FTC; owned audit scheduling, in-house internal SME interviews, evidence collection and secure retention, tracking of evidence collection, oversight of other audit-related activities.• Built a formal third-party assessment program to ensure safe transmission and storage of sensitive data.• Spearheaded initiative to identify user access to implement RBAC and support rapid new hire on-boarding and off-boarding processes. • Conducted interviews with employees and management across several major business units to discover high-level access requirements. Leveraged user reported data and actual access in AD to determine required content for function-based business roles. Mapped functional business and application roles across a population of approximately 300 people within tight 60-day window.

Tempe, Arizona, Us

Conducted third-party security assessments including but not limited to in-depth technical interviews and on-site assessments to ensure security and data protection requirements are met. • Validated physical security requirements of call center partners to meet requirements of both the organization and PCI-DSS.• Assessed the level of risk associated with security gaps and provided recommendations for treatment. Informed the business of vendor risk-related items.• Executed security follow up with critical/high-risk third parties to ensure continued compliance with the organization's security and regulatory (PCI-DSS, SOC, etc) requirements.• Led the implementation and configuration of Allgress GRC Suite.• Selected to be part of the organization's IRT (Incident Response Team).

Westlake, Texas, Us

Steered annual IT Risk Assessment and findings follow up. Built and maintained internal process documentation and collaborated to ensure gaps in process and protection were addressed. • Maintained documentation related to mitigation of issues and findings post-assessment for regulatory bodies including FED and OCC.• Reviewed and rated risks to demonstrate continuous compliance improvement. Worked with individuals and individual business units to identify, rank, and mitigate issues found as a result of risk assessment.• Mapped regulatory requirements from in-house tool and common control sets (PCI, GLBA, etc.) to ISO-27001:2013 and ISO-27002:2013 to facilitate risk assessments and audit activity.

New York, Ny, Us

Validated user access within Linux virtual and live environments. Built and maintained virtual SailPoint environment for team education and POC project work. Used SQL database queries to acquire offline sandbox validation inputs. Developed test cases for SIT and UAT in support of SDLC. • Utilized virtual machines to prove advancing technology solutions within the SailPoint environment.• Identified deficiencies on contemporary and legacy systems using nCircle, at the enterprise level, to scan network servers; located high-level disconnected business applications requiring custom integrations.• Increased efficiency and removed redundant operations by defining roles, manually, using XML batch files.

Phoenix, Az, Us

Provided oversight of Access and Identity Management quarterly access attestation and manage policies as they related to the user identity and access management lifecycles. Built and maintained internal process documentation, technical documentation, and compliance attestations. Worked closely with internal and external audit bodies and other business units to ensure compliance needs were met.• Created, reviewed, analyzed, and approved security exceptions to ensure accountability for and mitigated risks to lowest possible levels.

Phoenix, Az, Us

Oversaw compliance aspects of the major components of Apollo’s IDMGMT system. • Oracle Identity Analytics. Key resource for implementation of OIA as a complement to the company's current identity solution. Built custom reports utilizing iReports / JasperReports to fulfill auditor information requests. Communicated directly with key business units to determine appropriate access requirements to build enterprise-level access in OIA. • IDMGMT SLDC: Actively participated in IDMGMT development life-cycle pertaining to audit/security controls and compliance. Consulted with AIM Product Manager to assist in development of process changes or new features in response to technical or business needs. • AUDIT, CONTROLS, and COMPLIANCE: Mentored coworkers in the systems and processes used by AIM and cross trained team members on the SOX quarterly access review as part of succession planning. • Owned compliance and control attestations, SIPOCs, IAM process documentation, other security related audits and communication with internal and external audit and other compliance groups. • Administered SOX quarterly access review and maintain evidence records and reporting. Assisted in oversight of systems access, network access, role governance processes, and identity management systems. • Ensured identity products, access controls, and access processes remained in compliance with SOX, PCI, and other regulatory requirements.

Phoenix, Az, Us

Supervised, managed, and directed a team of IT professionals to provide excellent phone and remote computer and laptop support. • Provided training for new technicians and ongoing training and direction for IT Certification pursuit.• Performed quality assurance observance on recorded calls and support tickets submitted through Service Desk.

Phoenix, Az, Us

Established logical access controls and compliance measures for university systems and networks. Identified functional control areas and demonstrated relationships in Visio; used SQL to effectively manage complex database. Managed and maintained SIPOC workflows for all IDMGMT processes, clearly demonstrating where security measures were implemented to meet control and compliance requirements. • Fortified identity management solution by upgrading to Oracle Identity Analytics; managed all aspects of readiness from lifecycle mapping (with PWC and Simeo Solutions). Owned $5M+ budget and produced all deliverables on time with embedded quality controls. Liaised with external PCI auditors to collect evidence for controls related to access and IDMGMT.• Prepared annual compliance attestations to demonstrate robust access control alignment with PCI and SOX.

Advanced Computer Security Certificate, Computer And Information Systems Security/Information Assurance

Master Of Information Systems Management, Information Systems Management

Master Of Arts, Innovative Leadership, Innovative Leadershp

Bs Information Technology, Information Technology