Derek Welch Email & Phone Number

Middletown, Pennsylvania, Us

Denver, Colorado, Us

Denver, Colorado, Us

Vice President of Internal Audit

Denver, Colorado, Us

Developed and provided oversight and management for all information security planning and strategy to ensure alignment with the board of director and executive managements tolerance of risk.Carried out the full duties and responsibilities of CISO for TransMontaigne.Direct management of cyber security and incident response teams.Directed the tactical execution of a comprehensive information security program, and provided regular reports that serve to inform executive management on the health of information security efforts and changing environment of related risks. Designed and implemented operational IT controls around industrial control systems and SCADA environments based on NIST standards.Developed and led the strategy that transformed and integrated two separate IT groups into a modern responsive service organization.Designed and implemented processes and controls to ensure full SOX compliance.Executive management for the development and deployment of a custom excise tax calculator and EDI platform resulting in $3 million annual OPEX savings over leading OTS solutions.Led technology integration planning and execution for domestic and International M&A activities.Managed systems, applications, and infrastructure responsible for processing daily EFTtransactions totaling as much as $60 million in a revenue.Executive champion for the procurement, implementation and operation of an ETRM application (Right Angle) - for a crude gathering and logistics business unit.

Denver, Colorado, Us

Developed an enterprise wide security governance model, in conjunction with company’s business leaders, to include information security policies, standards, guidelines, and controls in compliance with applicable security and governmental regulations.Developed, implemented and orchestrated testing of business continuity and disaster recovery plans for the technology landscape.Provided advisory services to business leaders in consideration of new businesses or changes to existing business needs. Developed and managed the company’s threat and vulnerability assessment and management program, to include 3rd parties, providing regular reports to management and the Board of Directors.Collaborated with the business leadership in defining information security controls, including information system architecture, operations, access, and use. Maintained close relationships with operational IT, legal, business continuity, audit, risk, and regulatory teams.Developed and implemented information security training and awareness for company's personnel.

Denver, Colorado, Us

Performed detailed and technical analysis of ICS and SCADA environments and help integrate cyber security solutions.Acted as a technical advisor and SME to internal customers and executive management.Directed and managed technical staff during the implementation, installation, configuration, and support of network architecture.Maintained a broad knowledge of current and emerging state-of-the-art computer/network systems technologies, architectures, and products.Prepared documentation in support of internal and external audits. Conducted cyber security and vulnerability assessments on both enterprise and industrial control system environments. Contributed to the development of NERC CIP compliant programs at terminal locations across North America and Canada. Led the development of control/SCADA system security plans in compliance with NERC CIP.Managed the development of applications and oversight procedure for EPA regulatory programs.

Provided design and product recommendations for infrastructure and security technologies for client organizations. Ensured selected technologies delivered to meet stated use cases and business requirements. Managed partner relationships with the leading vendors to ensure a consistent approach to securing client information and the assets. Directed the design and implementation of security solution strategies for our clients’ web applications, software, and infrastructure. Assisted clients in secure application development/software development/deployment methodologies. Work with subject matter experts to establish the technical application of infrastructure architectures and technologies.Wrote detailed security requirements for deployment of applications and network infrastructure and participated in client focus groups to help define security requirements for new and emerging technology challenges. Defined and implemented information security architecture policies, standards, and baselines. Made recommendations regarding security plans, policies, standards and procedures for clients and led penetration testing and vulnerability assessments for clients.

Suwanee, Ga, Us

Master Of Science (Ms), Computer And Information Systems Security/Information Assurance

Bs-Information Technology, Computer And Information Systems Security/Information Assurance