Jeffrey Struble Email & Phone Number

Established and managed the Corporate Information Security programs. Program highlights include the researching, recommending, implementing and administering of CIS Business Plan, policy compliance, data protection and End-User computing.Documented and proposed a three year business strategy that demonstrated CIS's alignment with the industry, compliance with regulatory requirements, client requests and business sponsorship. The strategy outlined prioritized initiatives that ensure… Show more Established and managed the Corporate Information Security programs. Program highlights include the researching, recommending, implementing and administering of CIS Business Plan, policy compliance, data protection and End-User computing.Documented and proposed a three year business strategy that demonstrated CIS's alignment with the industry, compliance with regulatory requirements, client requests and business sponsorship. The strategy outlined prioritized initiatives that ensure support of the Corporations goals and objectives.Established a corporate wide program that assisted business system and infrastructure administrators in complying with corporate standards. A committee was organized for consulting with system owners in determining risk and effectiveness of controls. Solutions were identified that would assist in mitigating risk.Implemented a Data Leakage Prevention program that secured client's private information at end-user level. The Program included securing data on the laptop through harddisk encryption; use of removable media and securing the device; email encryption and tracking data usage.Developed monthly reporting matrix for managers to review the effectiveness of the security solutions implemented. Show less

Established the Corporate Information Security and Information Technology Compliance programs. Program highlights include the development, documentation, implementation, dissemination and maintenance of IT security policies, procedures, standards, baselines, awareness & training, risk assessments and security architecture design and information security services.Established an Information Security Advisory Board to foster a collaborative approach to information technology security… Show more Established the Corporate Information Security and Information Technology Compliance programs. Program highlights include the development, documentation, implementation, dissemination and maintenance of IT security policies, procedures, standards, baselines, awareness & training, risk assessments and security architecture design and information security services.Established an Information Security Advisory Board to foster a collaborative approach to information technology security efforts across the corporation.Implemented Corporate Information Security program that outlined a strategic vision for security policies, support, priorities, communications and business sponsorship for security initiatives.Implemented a compliance program to test and validate that controls met regulatory obligations (FDIC, GLBA, SOX,).Developed and enforced practical and effective IT security solutions that ensured accountability, integrity and confidentiality across the Bank's infrastructure.Implemented a Vulnerability Management program for the deployment of security patches, weekly vulnerability assessments, wireless threat assessments and Ethical Hacking.Conducted regular assessments of critical applications and processes to ensure compliance with IT policies.Liaison to internal and external auditors, and regulatory examinations which included organization of the review, logging and tracking of observations and monthly status to Executive Management. Show less

Created a corporate level information security function including security administration and operations, identity management, access controls, network security, remote access and security awareness.Developed security policies, standards and guidelines and enforcement procedures to support information security and privacy policies in compliance with legal and regulatory obligations.Developed IT control frameworks, documentation, testing procedures and improvement solutions based on COSO… Show more Created a corporate level information security function including security administration and operations, identity management, access controls, network security, remote access and security awareness.Developed security policies, standards and guidelines and enforcement procedures to support information security and privacy policies in compliance with legal and regulatory obligations.Developed IT control frameworks, documentation, testing procedures and improvement solutions based on COSO ( Committee of Sponsoring Organizations) and COBIT (Control Objectives for Information and Related Technologies) to comply with industry requirements.Provide a consultative support to senior management team on the security and risk implications of all current and future business-related activities as well as, providing support for corporate sales and marketing efforts providing guidance to external clients.Liaison to internal and external auditors, and regulatory examinations which included organization of the review, logging and tracking of observations and monthly status to Executive Management.Implementation of IT Business Continuity Plan for Systems operations, documentation, testing and regular maintenance of plan. Show less

Planned, organized, managed and conducted all activities of technology audits; systems under development, application systems, data center and technical reviews analyzed internal controls and operations to review the effectiveness of controls at corporate locations, and designed computer related control measures. Provided senior management with recommended action plans to address observations.Control reviews were categorized into *Management Operations *Computer… Show more Planned, organized, managed and conducted all activities of technology audits; systems under development, application systems, data center and technical reviews analyzed internal controls and operations to review the effectiveness of controls at corporate locations, and designed computer related control measures. Provided senior management with recommended action plans to address observations.Control reviews were categorized into *Management Operations *Computer Operations*Information Security *Acquisition & Development*Support and Delivery Show less

Performed requirement definitions, feasibility studies, system analysis, system design, evaluation and selection of computer hardware and software, programming, testing and conversions, system implementation, computer operations, software maintenance.

Assisted the Systems department in the implementation of a monthly reconciliation system that provided clients with automated reports and transaction logs. Conducted model office testing, drafted end-user documentation and daily operational procedures. Communicated to management weekly status and progress to ensure project objectives and goals were maintained. Technologies Work experience in a wide range of technologies including:*RACF *Windows (NT, 95, 98, 200X… Show more Assisted the Systems department in the implementation of a monthly reconciliation system that provided clients with automated reports and transaction logs. Conducted model office testing, drafted end-user documentation and daily operational procedures. Communicated to management weekly status and progress to ensure project objectives and goals were maintained. Technologies Work experience in a wide range of technologies including:*RACF *Windows (NT, 95, 98, 200X, XP)*ACF2 *Unix (Sun Solaris, AIX, Linux)*Database (Oracle, SQL) *Checkpoint Firewall*Nessus *Bind View*ISS Real Secure *Symantec ITA*Antivirus (Symantec, Postini) *Foundstone Vulnerability Assessment Tool*RSA Secure ID *Verisign Digital Certificates*Microsoft Office Suite *Front Page Web Development Show less

Bs, Management Information Systems

Business Management