Ilene Klein, Cissp, Cism Email & Phone Number

Reporting to the Vice President Cyber Resiliency Services, help create a society where everyone has the knowledge, skills, and resources needed to recognize and defend against cybercrime.• Own and manage the FightCybercrime.org Cyber Resource Catalog (CRC). This includes creating governance documentation and developing new CRC resources and public outreach materials, as well as vetting proposed resources and keeping the CRC fresh. Work performed under a Cooperative Agreement with the Cybersecurity and Infrastructure Security Agency (CISA). • Help create the National Information Exchange Model (NIEM) Cyber Domain — specifically, its vocabulary for State, Local, Tribal, and Territorial (SLTT) government Cyber Incident Response and Reporting for general IT and cyber-physical systems. Solicit SLTT stakeholders, facilitate meetings and events, identify and finalize vocabulary terms for inclusion in NIEM. Work performed under a Cooperative Agreement with CISA.• Build strong relationships with current and proposed CSN partners to increase the national and global cyber resiliency posture by conducting outreach and working with CSN partners on shared initiatives. These include the World Economic Forum’s Partnership Against Cybercrime and the Cyber Readiness Institute’s Small Business Advisory Council. • Increase the cyber resiliency posture of CSN employees and projects, such as by writing CSN’s Acceptable Use Policy, Disaster Recovery Plan, and Incident Response Plan.

Reporting to the Director of the Office of Homeland Security and Emergency Management, improve the cyber resilience of Arizona through public and private community outreach and intelligence sharing.• Manage, direct, and grow Arizona’s cyber intelligence capabilities at the Arizona Counter Terrorism Information Center (ACTIC), Arizona’s fusion center. Provide cybersecurity support to the ACTIC for special events, such as local and federal elections, dignitary visits, and high-profile, public events.• Create program to collect, analyze, and appropriately disseminate strategic, operational, and tactical Arizona and other threat intelligence and incident information, including indicators of compromise and trends. Provide timely alerts and notices of cyber threats. • Grow and maintain relationships with industry peers, public and private stakeholders, community leaders, local and federal law enforcement, and Arizona residents to drive strategy, innovation, intelligence sharing, and cyber best practices.• Establish and facilitate consolidated, “whole community” cyber threat intel sharing meetings. Facilitate Arizona government, federal partner, and national cybersecurity information sharing. Act a Southwest Region Coordinator for the National Fusion Center Association Cyber Intelligence Network.• Stay abreast of current and emerging cybersecurity trends, threats, actors, and major incidents.• Educate residents, businesses, organizations, and government entities; publish newsletters and other materials, and facilitate cybersecurity seminars, workshops, and exercises.• Help increase the pipeline of cybersecurity professionals through shared initiatives and mentoring.

Reporting to CSO, lead security governance and compliance (SGC) team for a leading payment processor that processes over 20 billion payments annually for over 500,000 merchants and financial institutions.• As a leader on the security team, provide strategic direction for Vantiv Security Services’ risk-based, enterprise-wide information security management program and budget.• Create Vantiv’s security controls framework based on NIST Cyber Security Framework. Develop and implement continuous compliance program and change organizational culture.• Build, own, manage, and communicate Vantiv’s security governance program, policy framework, exception processing, and security awareness program.• Own and manage Vantiv’s compliance with Payment Card Industry (PCI) security requirements and oversee 10 annual Reports on Compliance. Develop and implement plan to streamline ROCs and reduce compliance burden.• Oversee all internal and external security-related audits and assessments; ensure successful remediation efforts. • Partner and build cross-functional relationships to drive strategy, innovation, and best practices across enterprise. • Build high-functioning team, recruit, assess and develop talent, and provide direct and actionable feedback to employees, mentees, and others.

Reporting to CISO, lead information security and privacy governance for $3.5 billion city with over 26 disparate departments and functions.• Develop, implement, and provide oversight of information security and data privacy policies, standards, and processes.• Create and build city’s security awareness program and training, including role-based training, newsletters, events, and award-winning, public-facing website. • Create and build city’s Data Privacy Program, including Privacy Plan, Breach Notification Procedure, privacy impact assessments, website notices, and privacy and breach response training. • Assess risks of new projects and initiatives; recommend mitigation strategies and controls. • Lead and/or support Payment Card Industry (PCI) compliance, data-loss prevention, use of personal mobile devices (BYOD), and other security mandates and initiatives. • Lead security and privacy governance teams, including management-level, department security liaisons, IT Governance Security Working Group, and Privacy Oversight Council, and facilitate collaboration on city-wide security and privacy initiatives.• Act as CISO during vacation periods.

Reporting to Director Security Governance, manage Kraft Foods’ security research, communications, and transformation function. • Establish and lead the information security awareness program for about 100,000 global employees and contractors. This includes building a network of regional Security Champions, creating content and training, and hosting events.• Act as expert resource/in-house consultant in information security, risk management, privacy, and controls. • Coordinate information security transition and transformation processes with outsourced IT vendor to assure appropriate controls are in place and to minimize business disruption. • Manage security department’s budget.

Reporting to Sr. Manager, Information Security, perform a variety of roles in the information security management domain.• Establish, manage, and lead PM USA’s threat, vulnerability, and virus incident response programs. • Develop strategies for security audit and monitoring and for threat/vulnerability management. • Research and define internal security controls based on frameworks, including COSO and CoBIT and conduct internal audits as part of Sarbanes-Oxley initiative. • Write computer security policies, processes, and awareness materials and publications.• Act as primary liaison to parent and sister operating companies on anti-spam solutions, incident response, and policies.As Sr. eBusiness Specialist, manage multiple eBusiness projects from ideation through execution. • Define project requirements, build business cases, and present project justification to Sr. Management. • Write RFIs, evaluate vendor submissions, and negotiate with vendors to fulfill project needs. • Manage project budgets, risks, and cross-functional project teams. • Help lead eBusiness Strategy project focusing on technical architecture and security.