Duane Baldwin Email & Phone Number

Columbus, Ohio Area

Assessing cyber-security risks.

Greater Chicago Area

Developing, implementing, and managing information security compliance programs aligned with NIST CSF, HIPAA HITRUST, SOC 1 & 2, ISO 27001 / 27002, GDPR, and FFIEC regulatory requirements.

Greater Chicago Area

IT Security Consulting. Responsible for IT Security Governance, Risk, and Compliance with particular emphasis on regulatory requirements including PCI, ISO, NIST, GLBA, FFIEC, OCC, HIPAA, PCI, privacy, risk management, and third party management.

Responsible for Governance, Risk, and Compliance with particular emphasis on regulatory requirements including PCI, ISO, NIST, GLBA, HIPAA, PCI, risk management, and third party management.

Managed project teams working on a variety of security engagements relating to regulatory compliance in such areas as SOX, NIST, ISO, GLBA, PCI, and HIPAA. Geographically responsible for Canada and the western United States.

I used to spend most of my time breaking into systems and showing people the flaws that allowed it. Now I spend most of my time helping people realize that it's the process that broke down, not the technology.

Washington D.C. Metro Area

Led a team of auditors conducting cyber-security audits for the Department of Energy.

Manage a security practice covering the western United States and Canada.

Installed the Bank's first firewall and Internet banking portal. Managed security for the bank for UNIX, Tandem, Novell, and Windows environments.

Mba, Business Administration And Management, General

Bs, International Business

Chemical Engineering

Studied Chemical Engineering but wound up in cyber-security