Franky Datch Email & Phone Number

Raleigh, North Carolina, United States

Take part in the strategies for implementing policy standards to make sure rules and procedures adhere to cybersecurity policies; monitor audit results and suggestions to make sure the right mitigating measures are implemented.o Oversee the implementation of action plans, milestones, and remediation plans for tasks related to remediation that are found during risk assessments, audits, inspections, and other related procedures.o Make sure that the organization's vision and goals… Show more Take part in the strategies for implementing policy standards to make sure rules and procedures adhere to cybersecurity policies; monitor audit results and suggestions to make sure the right mitigating measures are implemented.o Oversee the implementation of action plans, milestones, and remediation plans for tasks related to remediation that are found during risk assessments, audits, inspections, and other related procedures.o Make sure that the organization's vision and goals reflect sound principles and raise management's awareness of security and control issues.o Oversee the creation of security compliance procedures and audits for outside services (like data centers run by cloud service providers).o Assist with the required compliance activities (such as making sure compliance monitoring and system security configuration guidelines are followed).o Assist in ensuring that all procurements, acquisitions, and outsourcing initiatives handle information.Requirements for control and security that are in line with corporate objectives.o Collaborate with teams responsible for process and technology delivery to guarantee that information security is appropriately taken into account and applied in the routine delivery of services, solutions, and procedures.o Support local security and technology teams by serving as a point of contact for stakeholders regarding information security and IT control delivery throughout the company.o Develop security guidelines using gap analysis as a guide.o Manage vendors by utilizing the artifacts from the third-party review (control checklist) to guide the sending and answering of questionnaires (Sig lite, Sig core, and client security questionnaires).o Perform yearly and quarterly audits, gathering and submitting evidence while collaborating with the external auditor to act as the organization's internal auditor.o Run a phishing awareness campaign every month and provide training Show less

Sterling, Virginia, United States

Perform cybersecurity risk assessments utilizing industry-standard frameworks on suppliers and third-party vendors.o Create and keep up a thorough list of all third-party suppliers and vendors, keeping tabs on their cybersecurity risk profiles.o Work together with the legal and procurement departments to make sure that third-party contracts contain the necessary cybersecurity clauses and requirements.o Plan, organize, and carry out risk-based security assessments of third… Show more Perform cybersecurity risk assessments utilizing industry-standard frameworks on suppliers and third-party vendors.o Create and keep up a thorough list of all third-party suppliers and vendors, keeping tabs on their cybersecurity risk profiles.o Work together with the legal and procurement departments to make sure that third-party contracts contain the necessary cybersecurity clauses and requirements.o Plan, organize, and carry out risk-based security assessments of third parties to guarantee continued adherence to laws, rules, contracts, corporate guidelines, and internal controls.o Oversee the creation, assessment, application, and upkeep of standards, guidelines, policies, and processes in accordance with the laws that apply, such as ISO 27001, NIST SP 800-53 Framework Controls, FEDRAMP, SOX, COBIT, PCI DSS, GDPR, SOC 2, CCPA, HIPAA, and NIST SP 800-171.o Keep an eye out for any changes in the cybersecurity risk profiles of third-party suppliers and vendors, and report any issues to management.o Advise internal teams on best practices for handling cybersecurity risks posed by third parties.o Stay up to date on the most recent privacy, security, and legal issues as well as best practices that affect third-party risk management.o Examine technical security controls, provide implementation responses, and confirm that systems are compliant with NIST SP 800-171 and NIST SP 800-61 to determine whether they are currently meeting requirements.o Perform PCI DSS and SOC audits on a quarterly and annual basis.o Manage timely security evaluations and audits and create cloud environments with Azure.o Take the lead in putting the NIST framework into practice for risk management Show less

Sterling, Virginia, United States

o Understand and prepare Risk Assessment (RA), Privacy Impact Assessment (PIA), System Security Test and Evaluation (ST&E), E-Authentication, Contingency Plan (CP), Plan of Actions and Milestone (POA&M), SAP, RTM, RA, and SAR in order to analyze and update System Security Plans (SSP).o To obtain and maintain ATO, implement technical security controls that comply with a federally-mandated security requirement that has been authorized by NIST 800-53R4.o Constructed, recorded, and… Show more o Understand and prepare Risk Assessment (RA), Privacy Impact Assessment (PIA), System Security Test and Evaluation (ST&E), E-Authentication, Contingency Plan (CP), Plan of Actions and Milestone (POA&M), SAP, RTM, RA, and SAR in order to analyze and update System Security Plans (SSP).o To obtain and maintain ATO, implement technical security controls that comply with a federally-mandated security requirement that has been authorized by NIST 800-53R4.o Constructed, recorded, and executed internal control testing and evidence documentation; supported audits and improved the audit program and procedures.o Firewalls and network devices o Intrusion detection and prevention systems (IDS/IPS).o Anti-malware systems.o Security Incident and Event Management systems (SIEM).o Data Loss Prevention Systems (DLP).o Advanced Endpoint Detection and Response Systems (EDR).o External communications from outside entities, users, phone calls, and emails.o Document threat campaign(s) techniques lateral movements and extract indicators of compromise (IOCs). o Manage the Security monitoring tools and set up dashboards and alerts. o Developed and maintained technical documentation and Standard Operating Procedures (SOP).o Conduct security research and intelligence gathering on emerging threats and exploits. o Participate in shift transition calls to ensure all open cases and tasks are appropriately managed and addressed. o Periodic reporting of metrics and corresponding analysis for client review and strategic information security program adjustments and planning. o Maintenance and management of various security technology platforms. o Secure privilege account; Separate administrative accounts for the admin agents for elevated permissions.o Onboarding process or set up permissions and accounts for a new user (workflow processing or chain of communication for approval) Show less

Master'S Degree, Cyber Security Management And Policy

Cybersecurity management involves the strategic planning, operations, implementation, and monitoring of cybersecurity practices.

Associate'S Degree, Information Technology

the study or use of systems (especially computers and telecommunications) for storing, retrieving, and sending information.

Bachelor'S Degree, Cyber Security Management And Policy

Practice of protecting systems, networks, and programs from digital attacks. These cyberattacks usually aim to access, change, or destroy.