Christian Alexander, Cissp-Ccsp-Ccso Security Architect Email & Phone Number

Obo Comtec Solutions

The Public Service Enterprise Group, Inc. (PSEG) is a publicly traded diversified energy company headquartered in Newark, New Jersey, US established in 1985 with a legacy dating back to 1903.The company's largest subsidiary is Public Service Electric and Gas Company (PSE&G).As the Sr. Cyber Security Architect, I am responsible for architecting, developing and delivering multi-cloud solutions that protect enterprise systems, applications and data by establishing policies, practices, and tools that prevent unauthorized access, use, disclosure, modification or disruption. The development of security designs and solutions for AWS and based on NIST 800-171 for the LIPA Regulated System Separation of the entities.Responsibilities:• Develop System Security Plans based on NIST 800-171 for protecting the “Confidentiality of Controlled Unclassified Information” (CUI) in the system separation of PSE&G-NJ and PSE&G-LI.• Design/develop security architecture and roadmaps to implement Access Management solutions: IAM, MFA, PAM, and CA.• Architect and design network security solutions including firewalls, VPN, and network segmentation.• Review technical discovery and interview subject matter experts (SMEs) and document current state in terms of processes, data flows, diagrams.• Assist in development of approach to “separate, lift and shift” the “as-is” systems.• Developed cyber security designs for systems and networks with multilevel security requirements or requirements for the processing of multiple classification levels of data.• Determine the protection needs (i.e., security controls) for the information system(s) and network(s) and document appropriately.• Define Security architecture roadmap and documentation of enterprise security framework.• Engage with Security Engineering to ensure solution design and build in line with long term security strategy.• Develop business requirements, technical requirements, architecture diagrams, and implementation designs

Washington Dc-Baltimore Area

As a GCP cloud security architect, responsible for developing, overseeing, and program managing a cloud computing strategy for the United States Postal Service (USPS). This includes working with the Business to understand their Google Cloud Platform (GCP) adoption plans, hosted application designs, and cloud management and monitoring methods. Responsibility as the GCP cloud security architect to provide the Business with industry best practices and insights regarding application architecture and deployment in GCP environments. Developed and designed the GCP security, network architecture, hardening, and logging enforcement to assist the Business with containment and remediation of workstreams related to cloud security incidents. Led multiple projects under tight deadlines, and provided in-depth experience in GCP architecture, best-practices, and security hardening and monitoring. Day to day tasks and responsibilities included:• Perform technical security configuration assessments of the Business’s Google Cloud Platform (GCP) deployments. • Guide the Business in the creation and optimization of GCP hardening controls that deliver enterprise-grade security, compliance, and responsiveness to the latest cloud-based threats and attacks. • Design enhanced security controls for existing GCP cloud deployments leveraged by the Business. • Define and develop appropriate governance for GCP architectures that complied to FEDRAMP requirements. • Provide recommendations and guidance for provisioning and automating cloud services. • Provide concepts and architectures – with a focus on how security controls are applied to cloud-based technologies with the following focus areas• Provide the experience for advising the Business on GCP architecture and design concepts based on compliance and regulatory standards (e.g., FEDRAMP, PII, PCI-DSS, PHI, GDPR, HIPAA). • Develop Governance and conveyance of security principles relevant to GCP architectures.

Dallas, Texas, United States

Collaborating with senior IT and Business Leaders to cultivate a security-minded culture while defining standards and maintaining security controls at the Enterprise level. Support and lead digital transformation of Hybrid-Cloud Enterprise networks as the Information Security Champion to ensure a mindset of continuous improvement, seamless execution, and all security components (technology, operations, and management) integrated by design. • Identifying, documenting, and effectively communicating complex security and technical issues at all levels from developers to senior executives• ‘Ensuring adherence to all regulatory and security industry best practices (NYDFS, FINRA, PCI, HIPAA, NACHA, OWASP, SANS, NIST, CIS) and defining Information Security processes• Partnering with key stakeholders to ensure security embedded into DevOps and CI/CD pipeline• Assisting in designing containerization/microservices/API security architecture, standards, and procedures• Designing cost-effective security solutions that meet functional, technical, and performance requirements• Developing HIGH-SECURITY Architectures for Hybrid-Cloud Enterprise networks that provide Confidentiality, Integrity, and Availability for Regulated and Confidential Data• Creating Security Architecture for Identity and Access Management solutions for API security and Platform transformation• Implementing Third-Line Information Security Controls Auditing for Hybrid-Cloud Enterprise Networks

Dallas, Texas, United States

Spearhead Security Assurance for Info-Cyber Security, Governance, Risk, and Compliance (GRC) reporting. Develop strategies to guide the strategic direction and maintain a comprehensive Information and cyber security. Manage an annual budget of $20-30M, leading the US and globally-dispersed teams of 20-100. Provide cost-effective solutions with operational excellence.• Lead financial systems design and architecture for InfoSec and cyber security requirements for the $27B entity-wide systems of SHUSA, Santander USA, and SBNA with 1M customers.• Ensure security policies and business process content for security controls meet regulatory requirements, networking, Google Cloud, and Infrastructure remain current and inclusive as part of the Security Assurance program• Architect and oversee the maturation of security and risk management of 512 security controls covering the information controls library with a blend of FFIEC, GLBA, NYDFS, and CSA security assurance in methodology and testing criteria.• Identify and escalate new and emerging gaps in process design utilizing statistical process control, control environments, IT environments providing expert advice on new requirements.• Work closely with the executive team, business leaders, and stakeholders to ensure security standards are embedded in business operations and research industry trends for compliance• Support legal providing MSAs and data security contract design, review, and approvals for data security requirements positioning the business in a favorable risk posture with third-party vendors

Richardson, Texas, United States

Propelled revenue growth, strategic vision, and expansion of the portfolio of services in the InfoSec, cloud, hybrid-IT, and digital transformation spaces. Developed business roadmaps for infrastructure technology opportunities, CAPEX optimization, and OPEX transformation. Collaborated with C-level and account executives, service delivery, and internal technical teams orchestrating InfoSec cloud risk assessments and risk mitigation strategies for digital transformation initiatives. Managed a $300M budget and aligned a team of 250 architecture, engineering, cloud security, information security, and data-ops members.Administrated risk analysis and risk classification in cyber security and InfoSec for the Japanese Operating Companies of $1.4T Mizuho Bank, Sumitomo Trust Bank, and $3.4T Canon USA.

Richardson, Texas, United States

Directed key functions critical to the management and delivery of complex InfoSec and data center infrastructure architecture and engineering services. Delivered business planning and program management for information technology and security in a 100m SaaS provider. Oversaw InfoSec/cyber security Pen testing for PCI DSS audits.• Created and implemented processes and procedures to streamline core operations and security by 95% in adherence to company policy and standards• Drove high-level and delivery of security and infrastructure projects with routine initiatives within the MIS infrastructure with 300+ highly complex security projects completed with <3% variance• Developed the process to support the InfoSec/Cybersecurity PCI DSS Audit Framework within Governance and the MIS Towers• Designed, managed and delivered the InfoSec remediation plans for security vulnerabilitiesDrove high-performing service support, including all Tower and PMO areas with a customer service focus. Managed Blue Cross Blue Shield North Carolina HIPAA compliance for infrastructure security services. Implemented InfoSec security plans for risk management under HIPPA and the NIST SP 800-37. Orchestrated 20K+ network devices within all projects, including Special Changes, BAU, and all WOs with infrastructure services teams of 100+ located across the Fujitsu Datacenters in the US and off-shore.• Oversaw profit and loss for programs and projects to drive financial and business development goals generating 18%–30% margins on managed projects and professional services• Controlled highly complex information services budgeting and infrastructure projects for the $30B+Alliance Data Card Services retail portfolio of 160+ branded credit programs

Dallas-Fort Worth Metroplex

Advanced organizational development of complex banking hardware and financial services software for the installation and systems operations of a large-scale Carrier Class data center rollout. Managed InfoSec and cyber security for all trading partners, including risk assessment, risk classification, and risk remediation.• Directed high-profile program development including audit and PCI InfoSec projects to maintain PCI DSS compliance for trading terminals and network devices to support customer transaction data• Oversaw product acquisition of financial /networking devices for third-party brokers and partners• Managed the Threat Based AppSec model using STRIDE for application security testing for runtime