James Pineau Email & Phone Number

Washington, Dc, Us

Milwaukee, Wisconsin, Us

Responsible for ensuring cybersecurity configurations meet or exceed internal/external regulations and internal policies. Accountable for performing several functions from network communication risk analysis to compliance assurance for various external regulatory reporting requirements. Evaluate current communications connections, protocols and configurations to ensure communications risks are minimized to the corporate global network and its external customers.• Evaluate infrastructure requests to ensure adherence to corporate policies and regulatory requirements.• Engage with Business units to educate and advise on policies and standards. This resulted in a 50% decrease of rejected requests.• Reviewed policies and standards to ensure compliance with current regulatory requirements.

Washington, District Of Columbia, Us

• Serve as an internal information security consultant to the organization. Support enterprise architecture, system operations and systems development, as required, to ensure information security policy, standards and controls are planned for and effectively implemented.• Collaborate with security teams and business/product stakeholders to identify and document security risks and track remediation efforts to address those risks.• Evaluate applicable global cybersecurity standards & frameworks to establish internal standards, guidelines, policies, processes, and procedures.• Drive the maturity of their current IR & Threat Intel program to improve detection capabilities• Manage the hiring, staffing and maintenance of a diverse and effective workforce. Responsible for career development/planning, performance of team members.

Duluth, Georgia, Us

• Direct a team of 8 Information Security Specialists with authority for information risk management, information technology audit and compliance, information security operations, infrastructure and applications, incident response, and capital/expense budget of $5+ million • Cyber Security Architect responsible for design, implementation of security infrastructure, including next generation firewalls, data loss prevention, mobile, on premise and cloud based proxies, intrusion prevention systems and malware detection appliances• Assess threats, risks, and vulnerabilities from emerging cyber security concerns by monitoring for the latest threats and vulnerabilities that could negatively impact the Enterprise • Perform initial and continuous risk assessments on all third party vendors to ensure compliance with Primerica policies and standards• Develop, review and analyze information security and privacy policies and standards of the company• Responsible for the full life cycle of enterprise information security systems by designing, testing, implementing and reviewing the system• Perform internal information security risk analysis, vulnerability assessment, penetration testing, and regulatory compliance assessment service with a focus on the Payment Card Industry Data Security Standards (PCI) and Sarbanes-Oxley (SOX) to ensure the enterprise remains in compliance with regulatory requirements• Evaluate security products from potential vendor partners and advised senior management regarding technical merits of new products in an effort to ensure the company stays up to date with the latest technology • Responsible for Security software compliance by ensuring that the company is using the latest versions of the software and under vendor support• Responsible for providing ongoing cyber security awareness training for organization • Responsible for developing Information Security Portfolio Strategy for the year 2017 and beyond

Atlanta, Ga, Us

• Ensuring that new line of business is in compliance with the FCRA as well as other applicable state and federal laws• Author policies and procedures to increase organizational accountability, quality assurance and drive improvement within Business Units• Manage commercial compliance requirements and governance as required by Small Business Financial Exchange• Conduct audits on new line of business customers to ensure adherence to Equifax policy and compliance• Conduct investigations on Equifax customers resulting from audit findings • Creation of application requirements and close collaboration with the technology teams to develop on-line applications to increase efficiency within Business Units• Credential potential commercial customers for Equifax business

Atlanta, Ga, Us

• Assist with risk assessments that encompasses over 200 external parties and internal business functions across 300+ global locations• Manage both direct and cross functional team on various security compliance initiatives across the global enterprise• Performed security risk assessments for strategic initiatives, acquisitions and external party relationships across global enterprise• Subject matter expert in managing stakeholders on risk mitigation strategies to optimize security effectiveness of key business and technology controls• Communicated risks identified during risk assessments to Senior Management via presentation and metric reporting• Assisted with the implementation of the enterprise security risk assessment process into the GRC system (Archer)• Led the global customer compliance program which included managing customer relationships and addressing security risk from major banking and financial institutions in various security frameworks including IS0 27001, PCI and COBIT• Managed onsite customer information security risk assessments for top Equifax customers with over $20 million of total revenue• Promoted to Director of Security Commercial Compliance

Atlanta, Ga, Us

• Manage Data Loss Prevention Program for Equifax globally including monitoring of email and endpoints for unauthorized movement of Personally Identifiable Information and integration of acquisitions into the Program• Manage the Vulnerability Management program; this includes oversight and execution of all scanning initiatives, validation of results and ensuring the remediation of identified vulnerabilities• Network and Host Intrusion Prevention System (IPS) deployment and management• Developed a Global threat and vulnerability monitoring team• Security Incident Response development and management• Management of network and endpoint data loss prevention systems

Atlanta, Ga, Us

• Responsible for implementation of virus protection and spam prevention for the enterprise• Served as a level three escalation for outsourced helpdesk• Designed and implemented solutions and process updates in compliance with Sarbanes-Oxley requirements• Utilized technical expertise to manage trouble-free systems administration for Lotus Notes & Domino D6/R5/R4 network & architecture, including 42 Domino servers in 9 countries, SMTP email gateways, and support for 8000+ clients• Ensured trouble free implementation of Lotus e-Learning, Sametime, Quickplace, disaster recovery plan, wireless device solutions, and virus protection• Designed tested clustering between four global data centers, with an average incremental size change of 15 Mb per end user• Achieved all project objectives while managing 2 migrations of Lotus Domino environment, including business case creation, recommendations to management, budget implementation, project resource management, and problem solving• Maintained effective relations with vendors, third party support, and contractors for comprehensive transfer of knowledge for solution support• Established and maintain effective communications with executive stakeholder team on project plans and performance• Assisted newly acquired companies with migration to Lotus platform, including presentation, business case creation, and problem solving• Designed and implemented successful strategies for improving security of Lotus Notes environment• Updated and maintained user applications, including Requisition Tracking, Calendar, Scheduling, Travel Approval, Human Resource Integration, Communications, VIS Fax, and Right Fax• Served as liaison between internal stakeholders, information technology personnel, and customers• Coordinated and conducted Lotus application training for end users