Jack Rockley Email & Phone Number

Duties include performing gap analysis of current policies and processes within Black Knight ISO department, managing and conducting SOC audits. Acting as backup to the main NIST representative in ISO. Duties include coordinating efforts as needed to be aligned with Black Knight's business goals, processes and policies.

Duties include maintaining compliance concerning security policies related to application vulnerability management. Tools used but not limited to: Qualys, Veracode, Archer and Whitehat.Additional Responsibilities:• Utilized WhiteHat and Veracode vulnerability scanning tools to facilitate vulnerability detection across the Black Knight Financial Systems applications. Tracked remediation efforts of vulnerabilities for applications.• Responsible for responding to Client/Corporate audit inquiries and assessments concerning the Application Threat and Vulnerability team’s tools.• Responsible for assessing and maintaining compliance to corporate standards within the Application Threat and Vulnerability team.• Managed the tracking and reporting of data from Archer concerning application and network penetration testing on a yearly basis.• Manage the tracking and reporting of application vulnerabilities discovered by the team’s third party tools.• Managed user audits, reviews, and access to tools within the Application Threat and Vulnerability team.• Interacting with divisions at Black Knight Financial Services for accurate reporting of known application vulnerability issues.• Responsible for management of Veracode and WhiteHat tools in relation to business practices at Black Knight Financial Services.• Interacting with third party vendors to resolve issues impacting the application vulnerability initiatives.• Manage reporting of application vulnerability statistics for Black Knight Financial Services.Accomplishments:• Successful implementation of quarterly compliance reviews in relation to the tools managed by the Threat and Vulnerability team.• Successful implementation of transferring from a severity to a risk based model of tracking vulnerabilities with the WhiteHat tool and integration with the Archer reporting tool.• Successful implementation of the corporate termination processes in relation to the tools managed by the Threat and Vulnerability team.

Duties include maintaining compliance concerning security, government and corporate regulations for the leading collaborative network solutions provider in the mortgage industry. Methodologies and knowledge base used but not limited to: OWASP and ITIL Tools used but not limited to: QualysGuard, AD Manager and Whitehat.Additional Responsibilities:• Utilized QualysGuard and WhiteHat vulnerability scanning tools to facilitate vulnerability detection across the RealEC network infrastructure and applications. Tracked remediation efforts of vulnerabilities for RealEC’s networks and applications.• Responsible for responding to Client audit inquiries and assessments.• Responsible for assessing and maintaining RealEC’s compliance to corporate standards.• Liason to LPS Vendor Management Team and responsible for facilitating RealEC Vendors to comply with corporate standards.• Managed third party reviews/audits of RealEC including code reviews, network and application penetration testing, and SSAE 16.• Facilitated RealEC’s Disaster Recovery and Business Continuity processes, including annual testing of processes.• Interacting with departments at RealEC to maintain security awareness and compliancy in projects, including but not limited to Solution and Design, Development, Quality Assurance, Delivery, Infrastructure and Project Teams.• Maintaining risk management processes, standards and initiatives utilizing quarterly review data/reports, internal audits.• Consulted on and reviewed RealEC client contracts in terms of security and compliance.Accomplishments:• Successful passing of security and compliance audits for 3 years.• Successful implementation of quarterly compliance reviews.• Successful implementation of vulnerability management for remediation of security vulnerabilities.• Successful implementation of vendor management processes within RealEC.

Atwood Oceanics, Inc., Houston, TX, IT Process and ControlsInitially performed gap analysis of current policies and processes within Atwood Oceanics’ IT department, leading the efforts for implementing new policies and processes to be in accordance with external SOX audits and internal Atwood Oceanics’ audits including training of staff on new policies and processes. Managing the IT controls and evidence, including metrics, in regards to yearly SOX 404 audits. Acted as Change Control Coordinator of the Change Management System, aiding the preparation, proofreading and creation of technical documents for Atwood’s IT department concerning production changes. Advised, as needed, the IT department members in preparation and verification of testing for production changes. Duties included co-ordinating the efforts of new processes to be aligned with Atwood Oceanic’s business goals, internal audit department, quality control department, senior management, CobiT, and ITIL business processes, and working closely with IT Senior Management concerning the preparation and promotion of the new initiatives. Developed audio and visual presentations and help guides as needed for new applications or changes.

Sr. IT ConsultantShell Global Solutions, Houston, TX, Quality Assurance LeadDuties include performing gap analysis of current test processes and procedures, leading the testing efforts for the Implementation Team, and advising the Implementation Manager on all areas of quality within the software development lifecycle.Additional Responsibilities:• Incorporating a testing methodology within internal software projects.• Reviewing and advising Implementation Manager concerning Requirements Documents.• Leading the testing efforts for five ongoing software projects.• Instructing and aiding team members on software quality techniques.• Reviewing and revising Business Requirements Documents.• Aiding and acting as Business Analyst per project needs.

Conducting internal audits of IT departments to ensure compliance and controls, interacting/corresponding with external IT audits, performing gap analysis of known procedures and processes, documenting work instructions, instruction of quality techniques and methodologies, advising software project teams on software quality techniques, and managing the document control system. Additional duties include incorporating a testing methodology within internal software projects, and maintaining a change control system for the IT production environment. Instructing and aiding software test teams in testing methodologies, reports and testing, including initiating Mercury Testdirector and QuickTest Pro. Preparing, presenting and maintaining documents and solutions for corporate IT processes and procedures supporting ISO and Sarbanes-Oxley requirements. Stewarting and maintaining a production change control system both within the United States and with teams in London and Singapore.

Preparing and presenting documents and solutions for IT processes and procedures for an ISO certification. Initiating a metrics methodology and system within IT. Gap analysis of known procedures and processes, documenting work instructions, conducting internal audits of IT, responding to external audits performed on IT, instruction of quality techniques and methodologies, advising software project teams on SQA techniques, and managing the document control system. Preparing and presenting documents and solutions for testing processes and procedures, and test lead over integration and interface testing. Initiating a defect tracking methodology and system within the test groups. Writing and preparing test cases, creating matrices for the test plans, creating the Test Strategy, testing templates, managing and defining the defect management process and tools, formalizing the final findings of the test groups, verifying test coverage for quality needs and objectives of the customer.

Consultant to Grace IC in Hong Kong, China as a Quality Assurance Analyst/Documentation Specialist. Duties include preparing and presenting documentation for the security application test group within Grace IC for the Standard Bank of China and Cable & Wireless. Additional duties include writing and preparing test cases, creating matrices for the test plans, managing the defect management of the security application test group, formalizing the final findings of the security application test group, verifying test coverage for quality needs and objectives of the customer.

Main responsibilities included internal audits of the software lifecycle within projects, establishing and maintaining a metric program, managing the defect tracking tool, establishing processes to conform to company’s software development philosophy, aiding in fostering a Software Quality Assurance awareness within the company, auditing internal projects, and process documentation. Guided teams within IT to move from a CMM level 1 to a CMM level 2.Acted as the company’s representative given the responsibility to ensure that all corporate infrastructure and product software was assessed and where necessary corrected to meet the corporate Y2K policy. Developed metrics for the first time in the history of the company. Developed a matrix tool to guarantee functional and requirement test coverage of software developed by the company. Developed a matrix which identifies the skills and training requirements for the SQA staff. Assisting with the interviewing of new test employees.

Database and website development and testing, testing tool development, and test execution and procedure documentation. Migration of legacy data to SQL Server 6.5 using custom designed VB applications. Developed VB code to generate HTML in a web server. Preliminary scoping for migration of database to SQL Server 7. Developed VB applications and test cases to validate results from new version of simulations against baseline versions. Developed test specifications for component object model interfaces using JavaSpec based testing tool. Designed and developed test specifications for software projects. Involved with the complete SDLC. Performed acceptance and regression testing for release candidates of commercial software. Established and documented installation testing procedures for software. Performed evaluation of automated testing software, and aided in the design and implementation of an internally created tool designed to automate testing of software.

Responsible for testing and analyzing the accuracy of real estate portfolio software in a Windows 3.1, Windows95, and Windows NT 4.0 environment. Created current versions of company software for testing needs. Responsible for reviewing the automated test results and assigning the results to the appropriate Quality Control Associate. Additional responsibilities:• Regression testing of software product• Created “capture and playback” test cases in Microsoft Test.• Software liaison between programmers and vendors• Personnel trainer• Software installation and help desk support as needed by Argus

Responsible for programming and trouble shooting both engineering and design applications on a DEC VAX using VAX/VMS Fortran and DCL code with Fortran routines.Additional responsibilities:• Assistant System Manager• Training company personnel• Repair and equipment maintenance• Purchasing• Emergency Response Team

Responsible for design and implementation of database systems on a DEC VAX; as well as off-site repair and maintenance of client systems.Additional responsibilities:• Trouble shooting• Training• Traveling to remote sites• Inventory control