Greg Upham, Cism, Cisa, Mcse Email & Phone Number

Nagaokakyo-Shi, Kyoto, Jp

Atlanta, Georgia, Us

Paris, Fr

• Create and implement Information Security Management Program (ISMP) from the ground up, including writing, reviewing, and editing entire corporate library of policies (based on NIST CSF and HITRUST CSF)• Create both the Risk Management and Third-Party Risk Management (TPRM) programs• Lead monthly Security Management Group meetings to communicate to leadership the results of ongoing improvement of the Information Security Management Program, including goals achieved, roadblocks found and how to overcome them, and suggestions for future initiatives • Meet with vendors and review/suggest products/offerings for needed security projects • Create ISMP website (SharePoint) as a repository for all security and risk documentation as well as helpful cybersecurity links and resources for employees. Executive management decided to use the website as the company intranet• Monitor, configure, and review all company cloud environments, including three AWS instances, Azure/MS365, Salesforce, and GCP• Improve Salesforce’s Security Health Check rating to 98%• Prepare company for HITRUST assessment• Implement Security and Awareness Training for the US side of the company and make available for our French employees (all courses in French and Spanish)• Create and hold tabletop exercises for both Incident Response and Business Continuity/Disaster Recovery• Develop and implement security processes and procedures that both enhance security/reduce risk and reduce redundancy and ‘red tape’• Create global BC/DR Plan and lead tabletop exercises

Columbus, Ga, Us

• Using NIST CSF/800-53, measure operating design, effectiveness, and efficiency of the Aflac Global Security program as well as the overall maturity level including subsidiaries• Build and maintain the cybersecurity control library composed of global and regional controls aligned against NIST CSF and utilizing NIST 800-53 controls as a basis• Perform quality review of requests for control test script changes across all regions• Communicate to leadership the results of assurance testing and changes affecting Aflac's information security posture, while applying Aflac's risk tolerance and risk management approach in evaluating the security posture, and escalate matters of significance

Atlanta, Ga, Us

• Helped in building a continuous monitoring testing function which provided oversight and monitoring of security controls• Performed evidence review, evidence automation advisory, security controls testing, and evidence reuse, where applicable• Defined, gathered, reported metrics regarding the delivery of security assurance and evidence review and evidence reuse programs • Audited traditional data center security controls into industry adopted cloud technologies: Amazon Web Services, Salesforce, G-Suite• Audited controls for multiple OS platforms, including Linux, UNIX, Windows and AIX

Atlanta, Georgia, Us

Marietta, Georgia, Us

1. Assists in planning, directing, and coordinating agency activities, specifically relative to Information Security.2. Assists in developing and enforcing the organization’s security policies, standards, and guidelines, security awareness, security information portion of the business continuity and disaster recovery plans, and all industry and government compliance issues.3. Assists in incorporating the design, deployment, management, control, and updating of platform and user specific security policies on a diverse range of internal hardware platforms supporting various software and operating systems.4. Conducts risk management analysis to identify areas of risk and to develop security measures to prevent losses.5. Monitors use of data files and regulates access to safeguard information in computer files.6. Works with business owners, IT managers, staff, and vendors in order to provide timely and efficient IT coordination of security services to meet agency needs.7. Create reports on status of agency information security programs and projects, as required.8. Communicates with senior executives through oral and written reports and presentations, as required.9. Develops and implements IT system security plans, projects and initiatives.10. Plans, implements, manages, and coordinates security measures and controls for information systems to regulate access to computer data and prevent unauthorized modification, destruction, or disclosure of information.11. Serves as Subject Matter Expert (SME) along with or in absence of the Senior Agency Information Security Office representing the agency on all issues relating to information security,

Gogarburn, Gb

 * Internal security auditor for International Banking using both the COBIT 5 frameworkand ISO 27001 set of standards* IT/IS controls testing for SOX/PCI-DSS Compliance* IT/IS security controls testing * Quarterly reviews with senior management on state of information and IT security * Documenting of audit tests, evidence and results * Updating audit test plans and procedures * SME for networking and security related issues* Work with Sr VPs/Directors, application owners/managers to resolve security issuesaffecting their domains and business units * Review all security policy documentation * Review and make recommendations for Business Continuity/Disaster Recoveryprocedures

Norwalk, Connecticut, Us

Lead System Administrator for major airport parking systems; assist Network Manager on projects when needed; project management for in-house IT projects Support multiple airport parking systems throughout the US and Canada Project leader for PCI audit preparation and certification Conduct internal PCI/PA-DSS audit of web application and network Work with IBM external auditor on PA-DSS certification for web application andsupporting network Create QA use cases and testing procedures for multiple projects Assist with third party IT forensics teams to determine cause of breaches at customersites (our applications were never compromised or cause of a breach) Responsible for ISO 9001 compliance for our team’s IT systems Primary system administrator for airport parking revenue systems Work directly with clients and third party vendors on various airport projects Responsible for PCI-DSS security and compliance for multiple clients – successfullypassed two PA-DSS certification on first external audit review Support and QA for multiple concurrent client projects Track projects, defects, issues using JIRA Penetration testing of web applications and related servers/networks Write training and technical documents for various procedures within our group Train team members on security and compliance issues Use of Oracle and SQL Server queries and database manipulation Evaluate various 3rd party cloud vendors (MS Azure, Amazon Web Services, etc.)

Pine Brook, Nj, Us

Small or short-term IT jobs at various locations in North America...mostly hardware installs, break/fix, software upgrades.

Houston, Tx, Us

Atlanta, Ga, Us

Raleigh, Nc, Us

Bba, International Business/Economics

Mit (Master Of Information Technology), Information Technology