John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer

John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer Email and Phone Number

Senior Security Compliance Architect @ ViaPath Technologies
John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer's Location
Austin, Texas, United States, United States
John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer's Contact Details

John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer work email

John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer personal email

n/a

John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer phone numbers

About John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer

Award-winning Certified Information Systems Auditor (CISA), and PCI Internal Security Assessor (ISA), with a record of achievement and technical leadership in IT auditing, compliance, risk remediation, and project management. Expert in PCI-DSS, SOC2/SSAE-16/SOX, FFIEC, HIPAA, ARRA HITECH, NIST 800-53, NYCRR and ISO27K. Hands-on leader and clear communicator able to achieve consensus in diverse environments, cultivate robust relationships with clients and colleagues, guide multiple concurrent projects, and implement disaster recovery and business continuity plans.

John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer's Current Company Details
ViaPath Technologies

Viapath Technologies

View
Senior Security Compliance Architect
John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer Work Experience Details
  • Viapath Technologies
    Principal Analyst, Compliance
    Viapath Technologies Mar 2022 - Present
    Falls Church, Us
    I've updated, or written, 50 policies so far this 1st year, using the NIST family of controls as a framework. I've successfully completed multiple audits: PCI-DSS, SOC2 Type 2, NYCRR, NIST 800-53, and soon ISO27K, I'm really happy working with all the people here, and they seem very happy with me.
  • Lands'​ End (Via Oxford Global Resources)
    Information Technology Auditor
    Lands'​ End (Via Oxford Global Resources) Jul 2021 - Feb 2022
    Dodgeville, Wi, Us
    • Sole analyst responsible for on-going and annual PCI-DSS audit by 3rd party.• Finished the 2nd half of 2021 PCI AoC audit (my predecessor left the company)• Initiated a deep review of PCI-DSS scope to address the gaps I saw during the 2021 PCI AoC audit.• Recommendation available from the manager.
  • Expedia Group
    Pci Compliance Analyst
    Expedia Group Nov 2019 - Jul 2021
    Seattle, Wa, Us
    - Continued managing audit for what was HomeAway then Vrbo.- PCI audit expanded to include "front end" card collection pages using "back end" iFrames
  • Expedia Group
    I.T. Security Compliance Analyst
    Expedia Group May 2019 - Nov 2019
    Seattle, Wa, Us
    - oversight of PCI-DSS compliance programs, collaborating with IT and business to map business processes and technology to requirements. - clarify and simplify complex processes to remediate gaps
  • Homeaway
    I.T. Security Compliance Analyst
    Homeaway Jan 2018 - May 2019
    - oversight of PCI-DSS compliance programs, collaborating with IT and business to map business processes and technology to requirements. - clarify and simplify complex processes to remediate gaps
  • Cvs Health
    Pci Compliance Advisor
    Cvs Health Aug 2017 - Oct 2017
    Woonsocket, Ri, Us
    • Explain various PCI-DSS requirements to staff• Evaluate proposed compliance resolutions for various PCI-DSS requirements• Evaluate details of overall OS+Application Log Reviews (PCI-DSS #10).
  • Conduent
    Compliance & Security Program Director
    Conduent Jan 2017 - Jun 2017
    Florham Park, New Jersey, Us
    My part of Xerox became Conduent on January 3, 2017. I also changed to address PCI-DSS compliance across all of Conduent.
  • Xerox
    Information Security Principal
    Xerox Apr 2013 - Jan 2017
    Norwalk, Connecticut, Us
    General I.T. security and compliance, with emphasis on PCI-DSS and SSAE16
  • Xerox
    Information Security Principal
    Xerox Jul 2012 - Mar 2013
    Norwalk, Connecticut, Us
    contract via Bridge360: Working at client Xerox on I.T. regulatory compliance and governance.
  • Ibc Bank
    Senior Consultant
    Ibc Bank Feb 2011 - Jul 2012
    Laredo, Tx, Us
    - Interviewed over 100 managers and staff to write over 200 pages for enterprise Business Impact Analysis report, Business and IT Risk Assessment, and FFIEC Gap Analysis. - Wrote Business Continuity Local Physical Risk & Security analysis for 4 locations (including 130 site photos and reference citations). - Researched business continuity software to assist client IBC Bank's selection. - Customized product software to fit FFIEC requirements and client's needs by using SharePoint 2010 Designer and SQL Server Reporting Services Report Builder. - Trained management and staff on the software via traditional classroom and video conference.
  • Elearning Corner, Llc
    It Security & Regulatory Compliance Consultant
    Elearning Corner, Llc Aug 2008 - Aug 2011
    Providing PCI-DSS, SOX and general security consultation and compliance services.
  • Wellmed Medical Management
    Senior Consultant
    Wellmed Medical Management Oct 2010 - Feb 2011
    San Antonio, Tx, Us
    Performed interviews to create Business Impact Analysis reports and IT Disaster Recovery Plans to support Business Continuity Plans.
  • Scott & White
    Is Security & Audit Manager
    Scott & White Apr 2009 - May 2010
    Manager of Security team for access control, and IT Audit Compliance manager.
  • Hoovers Inc.
    Compliance Project Manager
    Hoovers Inc. Sep 2008 - Mar 2009
    Jacksonville, Fl, Us
    Compliance review and remediation project management for PCI-DSS, SOX and corporate policies and standards.
  • Rainmaker Systems (Via Robert Half)
    It Auditor
    Rainmaker Systems (Via Robert Half) Aug 2007 - Aug 2008
    Campbell, Ca, Us
    Rainmaker achieved its first SOX certification in 2007. I perform and manage compliance activities for SOX, PCI-DSS, ISO27k and general security, as well as oversee related daily business processes.
  • Dell, Inc.
    Audit And Compliance
    Dell, Inc. Apr 2007 - May 2007
    Round Rock, Texas, Us
    Audit and compliance review and enforcement for disaster recovery standards.
  • Amd (Advanced Micro Devices)
    Internal It Sox Auditor
    Amd (Advanced Micro Devices) Apr 2005 - Jan 2007
    Santa Clara, California, Us
    • 2006—Project managed, reviewed, and generated IT Security compliance evidence for AMD’s Sarbanes-Oxley 404 (SOX) controls. Wrote process-and-procedure documents based on interviews and observation. Deeply investigated processes to ensure reliability and accuracy. Scope included 12 applications across 50 servers (Windows, UNIX, MVS, and VMS) in the USA, Germany, Singapore, and Malaysia. Created process improvements.• 2005—Audited, reviewed, and suggested improvements for IT compliance evidence for AMD’s worldwide Security, Data Management, and Infrastructure User Access SOX controls.
  • Advanced Micro Devices
    It Auditor
    Advanced Micro Devices 2005 - 2007
  • Temple-Inland, Inc. (Via Corestaff, Inc.)
    Project Manager / Technical Writer
    Temple-Inland, Inc. (Via Corestaff, Inc.) Apr 2004 - Dec 2004
    • Project managed Sarbanes-Oxley ("SOX") section 404 Data Management process documentation and evidence compliance for 55 applications within 4 lines of business crossing 4 locations. Worked 3 process owner executives and 100 IT workers and management. Researched materiality to SOX. Managed remediation projects. Assisted Access Administration, Operations and Change Management compliance. Analyzed IT Governance Institute's CobIT documents to refine 200 information points for SOX objectives and controls.• Drafted 6 division-wide standards. • Wrote workflow charts (Rummler-Brache "swim lanes"), narratives and checklists. • Edited 100 Project Life Cycle documents and process diagrams to information. Investigated 300 role names to then reduced total 100. Updated glossary to over 150 role names and terms.• Redesigned company intranet to organize and present information. Expanded usage to 60 departments, increased ACLs to 60 managers and 200 people.
  • Smarter Solutions, Inc.
    Applications & Systems Programmer
    Smarter Solutions, Inc. Feb 2004 - Apr 2004
    Austin, Texas, Us
    * Deployed staging and development systems to mirror production system. Installed software and maintenance. Exported data and user accounts. Functionally tested configuration of system.* Programming in Perl using MySQL.
  • Ibm Corporation
    Web Operations Team Leader
    Ibm Corporation Dec 1998 - Dec 2003
    Armonk, New York, Ny, Us
    * Led project team of 14 business owners and 26 application programmers to merge 2 public webservers into 1 infrastructure server. Set base for future load balancing and failover architecture.* Led division’s compliance remediation for Sarbenes-Oxley compliance for over 150 AIX and Windows servers. Achieved continuous satisfactory audit ratings.* Received Outstanding Technical Achievement award for “Software Mall 2000 deployment” for leadership role, teaming and programming expertise.* Led deployment of 1999 Chinese language support @ www.developer.ibm.com. Trained Chinese web editors onsite in Shanghai, China on content management process.* Managed deployment activities over 5 years, using Microsoft Project, across 120 worldwide application programmers and 30 worldwide business owners. 100% customer satisfaction. * Performed 24x7x365 production application server and business application support. Scheduled public website availability was consistently over 99.4% for 5 years.
  • Ibm Corporation
    Application Programmer – Perl
    Ibm Corporation Jan 1996 - Dec 1998
    Armonk, New York, Ny, Us
    * Received “Distinguished Contribution” award for leading USA team for 1997 Japanese and Korean language content enablement deployment, and supporting technical expertise.* Designed, coded, deployed and maintained webserver applications supporting customer technical support (entitled forums and “Ask A Question”).* Designed, coded, deployed and maintained website content management (promotion, aging, inventory), using Perl and DB2.* Designed, coded, deployed and maintained Perl proxy code to integrate cookie-using back-end application servers into the website.

John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer Skills

Disaster Recovery Security Pci Dss Information Technology Information Security Governance Integration It Audit Project Management Business Process Business Continuity Sarbanes Oxley Act Software Development Unix Process Improvement Perl Enterprise Architecture Sharepoint Pmp Software Documentation Network Security Cisa Risk Assessment Business Process Improvement Business Continuity Planning

John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer Education Details

  • University Of Connecticut
    University Of Connecticut
    Computer Science

Frequently Asked Questions about John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer

What company does John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer work for?

John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer works for Viapath Technologies

What is John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer's role at the current company?

John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer's current role is Senior Security Compliance Architect.

What is John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer's email address?

John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer's email address is is****@****end.com

What is John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer's direct phone number?

John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer's direct phone number is +151267*****

What schools did John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer attend?

John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer attended University Of Connecticut.

What are some of John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer's interests?

John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer has interest in Arts And Culture.

What skills is John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer known for?

John (Jak) Kulas, Cisa, Pci Isa, Isaca Certified Trainer has skills like Disaster Recovery, Security, Pci Dss, Information Technology, Information Security, Governance, Integration, It Audit, Project Management, Business Process, Business Continuity, Sarbanes Oxley Act.

Free Chrome Extension

Find emails, phones & company data instantly

Find verified emails from LinkedIn profiles
Get direct phone numbers & mobile contacts
Access company data & employee information
Works directly on LinkedIn - no copy/paste needed
Get Chrome Extension - Free

Aero Online

Your AI prospecting assistant

Download 750 million emails and 100 million phone numbers

Access emails and phone numbers of over 750 million business users. Instantly download verified profiles using 20+ filters, including location, job title, company, function, and industry.