Jone Le Email & Phone Number

More than 25 years' experience as an Information security and Risk professional, and IT enterprise architecture. Demonstrated expertise in establishing and implementing large information security programs. Designed and implemented an automated tool-based security risk assessment management framework that continuously monitors and detects Cybersecurity threats and vulnerabilities. Performed evaluations and selections of IT security tools and successfully implemented IT security systems to protect the availability, integrity, and confidentiality of critical business information and third party systems. Highly skilled, dedicated and enthusiastic team player with excellent leadership and communication skills.ACCOMPLISHMENTSLeadership-Successfully designed, developed and implemented Application and Third Party Security Programs to automate the risk assessment process for 6500+ applications and 6000+ third parties.- Designed, developed and implemented CloudControl, a cloud security tool, to bring greater transparency and improved security to digital supply chains for organizations using Equifax products and solutions.- Developed and implemented enterprise security strategy and framework that consists of strategically integrated elements of NIST risk management and Cybersecurity frameworks, SANS Critical Controls, ISO/IEC 27001/27002 and COBIT 5 for Information Security.Strategy and Planning- Established application and third parties risk assessment methodologies, policies and procedures.- Developed and communicated Acceptable Use policy, Mobile Device Management (MDM) and Bring Your Own Device (BYOD) policy, and many other security policies and standards to all users.Team Collaboration- Collaborated with large departments to establish enterprise security framework to accomplish common information security objectives and leverage common tools to reduce costs.- Coordinated the activities of Information Security Officers to define and establish unified program-wide approach to address cyber security issues and mitigate cyber security risks.Project Management-Managed Information Security Certification & Accreditation program implementing automated tools to realize efficiencies and significant cost savings, including developing Information security plans and processes.- Managed IT asset management and configuration management project implementing ServiceNow tool, defining enterprise IT inventory processes, automating system patching capability and significantly improving IT configuration management.