Gerardo Morales Email and Phone Number

Engineer external internet access solutions for non-browser applications through our web gateway.Review and generate external Entrust SSL certificates as part of PKI program.Review and tune intrusion prevention system (IPS) rules.Configure data sources, review log events and create alerts in our SIEM application.

Manage process of reviewing and updating IT standards on an on-going basis. Identify areas of improvement and work to document IT procedures. Provide IT internal control guidance to different areas of IT.

Coordinate remediation projects with subject matter experts to ensure audit findings are documented and remediated in a timely manner. Conduct document reviews and update existing policy and process documents to meet PCI, HIPPA and FedRAMP guidelines. Identify process improvement areas and work with subject matter experts to fill gaps. Point person for Information Security request during assessments and questionnaires. Reviewed vulnerability scan reports and pushed remediation efforts to ensure infrastructure devices are free of vulnerabilities.

· Conduct procedural and operation review of Information Security processes and system controls against corporate, government and internal I/S compliance standards· Provide guidance to I/S functional teams with implementation, monitoring and reporting control processes· Facilitate audits with external auditors and coordinate evidence review with I/S functional teams· Evaluate technology and business-related controls for integrating business and information system security and risk mitigation efforts.

• Coordinate IT SOX compliance program for Brink’s US• Test and evaluate the effectiveness of IT SOX controls• Identify weaknesses in controls and propose remediation plans• Update IT SOX process narratives and control descriptions• Meet with process and control owners to discuss weaknesses and improvement efforts

• Administer our global documentation depository, GRC on Demand.• Coordinate monthly SOX meetings with our Latin America and Asia Pacific regions.• Assist entities with documentation of their processes, risks, controls and control tests.• Provide guidance to entities in remediation of issues and action plans.• Refine and produce management and user reports for our GRC users.• Provide training for GRC, including on-site and WebEx sessions.

• Developed quality in-depth runbook procedures and service level agreements.• Took ownership of problem solving, automated processes and implemented workflow process improvements.• Provided application support to departments within Turst Services. • Executed end of day tasks for all of Institutional Trust Services. • Assist in migrating systems between JPMorgan Chase & The Bank of New York.

• Identified and monitored suspicious activity such as large cash transactions and wires on individual and business accounts. • Conducted analysis and investigations on accounts identified as suspicious. • Generated and submitted Suspicious Activity Reports to FINCEN.• Communicated results of investigations to account officers of various lines of business.