Gideon T. Rasmussen Email & Phone Number

Austin, TX, US

• Cybersecurity program design and assessments- Conducts strategic planning- Presents to a cybersecurity committee- Prepares presentations for boards of directors- Leads risk register meetings𝗥𝗲𝗰𝗲𝗻𝘁 𝗣𝗿𝗼𝗷𝗲𝗰𝘁𝘀:
• Data actions inventory
• Privacy risk management framework- NIST Privacy Framework v1.0- NIST privacy task statements- Consumer rights- Business obligations- Reputable practices to identify and mitigate risk- Assigned RACI designations to.
• 3 days of on-site meetings (March, June and November)- Cybersecurity committee meeting- Working sessions- Strategic planning- Outbrief presentation
• Insider risk management program - Phase II.
• Incident response playbook- Fraudulent website

Blue Bell, Pennsylvania, US

• Established Strategic Plans for two CISOs. Provided program development services
• Established a Risk Management process, inclusive of Policy, Risk Register Form, Log, Tollgates and an Executive Forum
• Conducted NIST Cybersecurity Framework Assessments, with a focus on insider threat, privacy, fraud prevention, process design, application governance and data management
• Established an Information Security Program under NIST 800-53. Leveraged 10 projects to implement supporting processes and technologies. Implemented controls to preserve the integrity of the Presidential election..
• Conducted 1:1 mentoring and provided Information Supplements

Andover, Massachusetts, US

Conducted a gap analysis and established a road map to drive the Information Security Program forward. Updated policies and established InfoSec Program documentation. Implemented Advanced Threat Management solution. Established Vulnerability Management and Application Security Programs. Established fraud scenario requirements to improve a company product.

Charlotte, NC, US

Established an Information Risk Management program within Consumer Data and Analytics. Sent threat advisories and presented best practices to address residual risk. Established Application Risk Profiles. Risk Hunting activities included risk scenario development, related assessment activity and identification of preventive controls. Tracked issues to.

Charlotte, NC, US

Responsible for bankofamerica.com, online banking and mobile banking. Managed a team of 15 application security professionals. Doubled support model coverage due to organizational change. Led Clear and Present Danger response and root cause analysis. Implemented risk reporting. Dramatically accelerated remediation. Established ethical hacking and dynamic.

Charlotte, NC, US

Supported five teams within Supplier Resiliency. Responsible for processes, procedures, program alignment to standards, risk model, technology, reporting, assessment initiations and scheduling. Managed a team of nine. Established process design function and standards. Led a project to consolidate data from teams throughout the company, providing one view.

Charlotte, NC, US

Established two payment card security programs. The Merchant PCI program evaluates merchant customers' adherence to PCI standards. The Enterprise PCI program evaluates internal compliance with PCI standards. Managed a team of seven, including responsibility for program funding and business cases. Defined processes, procedures, risk ranking methodology.

Charlotte, NC, US

Conducted on-site security assessments of external IT suppliers. Accomplished risk-based security program assessments including evaluation of firewalls, networking, encryption, application security, system hardening and access control. Remaining test procedures were distributed across the 10 domains of ISO 17799. Mentored new team members. Strong.