John Mchenry Email & Phone Number

Chicago, Illinois, Us

RSM US LLP (RSM) is the leading provider of audit, tax and consulting services focused on the middle market, with over 9,000 people in 90 offices nationwide. It is a licensed CPA firm and the U.S. member of RSM International, a global network of independent audit, tax and consulting firms with more than 43,000 people in over 120 countries. RSM uses its deep understanding of the needs and aspirations of clients to help them succeed. For more information, visit www.rsmus.comJohn oversees the security posture and compliance level of multiple cloud environments through the following activities:- Vulnerability management through scanning and manual testing- Governance documentation creation and maintenance- Risk management- Vendor management- Client support related to describing the security posture- Audit program management based on applicable security frameworks (AICPA TSC, CSA CCM, PCI, etc.)- Other activities related to security and compliance

Kansas City, Kansas, Us

In my current position, I manage the IT security operations for the Security Bank of Kansas City. As announced in July 2016, the seven banks which comprise Valley View Bancshares, Inc. will merge into Security Bank of Kansas City, which will create one of the largest banks in the Kansas City market with assets of $3.2bn. I oversee merger activities related to IT security operations and will be the Information Security Manager for Security Bank when the merger is complete.I am directly responsible for all areas of IT security within the organization, to include access management, vulnerability management, risk management, incident response, log management, network security, and policy development.

Chicago, Illinois, Us

• Acted as the subject matter expert on enterprise security for private, government, and Fortune 100 companies according to common security frameworks (e.g. FFIEC, PCI-DSS, HIPAA, NIST, ISO)• Worked with executive leadership and business units to assess organizational risk by identifying gaps in security posture• Outlined roadmaps to risk mitigation, based on priority and the organization’s risk appetite• Managed a variety of projects to ensure completion within budgets and according to deadlines• Evaluated network security through physical and wireless network penetration testing, vulnerability scanning, and social engineering• Provided input and guidance to securely architect networks through appropriate placement and configuration of security appliances• Presented at speaking engagements on emerging cybersecurity threats and associated audit considerations to various groups (IIA, ISACA, lunch-and-learns) • Participated in incident response investigations through log and malware behavior analysis

Kansas City, Mo, Us

• Acted as part of the network security team which was the network security focal point for the Kansas City district• Investigated security breaches through the examination of proxy logs, review of network traffic, and forensic analysis of hard drives• Conducted investigations of acceptable use violations• Performed vulnerability scans of systems and analyzed for business-line remediation• Designed, implemented, and administered the CyberArk (EPV) password vaulting technology nationwide

Kansas City, Mo, Us

• Created or amended appropriate security policies for the Kansas City district• Monitored content filtering solution and responded to incidents as needed • Performed security audits on business lines as required by policy• Conducted monthly training meetings with business line security liaisons• Established and tracked annual employee security awareness training

Kansas City, Mo, Us

• Part of the 24/7 national help desk for the Federal Reserve Bank System• Assisted employees with technical needs• Oversaw patch management efforts for the Kansas City district• Performed password resets and account unlocks • Performed other typical help desk activities

Randolph Afb, Tx, Us

• Worked in a high-pressure environment with direct reporting to base and national leadership• Acted as critical communication link between commanders and the troops• Remained professional and composed in highly stressful situations• Briefed high-level officers on base threat posture and readiness• Maintained a top secret clearance for over seven years