John Hickman Email and Phone Number

Provided leadership and guidance to the Vulnerability Management Engineering team with the administration and support of the Qualys platform. Implemented industry standards and best practices to minimize the security risk to Capital One’s business.• Planned and executed vulnerability and compliance scans across the IT infrastructure and product environments to ensure systems were secure against industry best practices in the US and UK.• Troubleshooted vulnerability scan results and identified compensating controls to minimize security risk.• Mentored team members and provided technical guidance on complex and strategic issues.

Performed as a vulnerability management SME on the infrastructure team. Analyzed results from internal vulnerability and configuration scans. Worked with system owners to drive remediation of vulnerabilities.• Reviewed security vulnerabilities across a variety of technologies and environments to determine high risk vulnerabilities to business assets.• Conducted detailed comprehensive investigation of security issues by reviewing vulnerability scan data.• Communicated the risks associated with identified vulnerabilities and provided recommendations to take corrective action to mitigate risks.

• Performed all aspects of IT audits, including planning, testing of controls and the preparing of accurate work papers to properly document and support audit findings. • Evaluated the effectiveness of internal controls and IT infrastructure in terms of risk to the organization and recommended controls to protect company assets. • Identified and reviewed agencies policies and procedures to ensure compliance with state and regulatory requirements.• Reviewed a wide range of security issues including architecture, firewalls, data in transit, continuity of operation and disaster recovery plans, physical security, and access control.