Jorge Maldonado Email & Phone Number

Saint Paul, Mn, Us

Vancouver, British Columbia, Ca

St. Paul, Minnesota, Us

Minneapolis, Mn, Us

I was hand-selected by the CEO following success with Target (below). My charge was to build the enterprise security program. I defined a formal program consisting of four major pillars: Governance, Risk Management, Security Architecture and Security Operations. I cultivated strong working relationships with technology and business partners to develop a culture of trust. I was originally recruited as Head of Security. ► Developed program charter specifying strategy and purpose of Security Program and outlining phases of program execution.► Captured 100% favorable security program audit ratings from vendor assessments performed by merchants including Target and Wal-Mart and financial institutions including GE Synchrony and JPMorgan.►Achieved highly commendable 1.9 / 5 Program maturity assessment rating from Ernst & Young just one year post program launch.►Led an incident response operation to effectively neutralize the impact of a third party network compromise which affected the MCX service. Directed all aspects of the response, including communication with the executive team and the company's merchant partners.► Supported executive team through significant litigation, including testifying on behalf of the organization.

I established this services firm, which provided network integration, network hosting, and customized solutions development to small and mid-sized clients. My scope encompassed driving new business development, proposals and presentations, technical implementations / project management and customer relationship management. ► Built a secure, robust network architecture to support the Blackberry for a major law office, and provided user training to maximize the full features and functionality of the system. ► Led a comprehensive technology assessment for Thompson Lightning Protection, as they considered investing $100K in a new technology infrastructure.

Minneapolis, Mn, Us

This top retailer recruited me to strategically direct series of company-wide enterprise information security, cloud and emerging technology initiatives. I articulated clear requirements regarding technology build and acquisition needs. I also cultivated strong relationships with different business partners to drive for results in key enterprise initiatives. ► Selected to lead security for MCX. Shaped 3rd party vendor assessment program, conducted assessments of high-risk vendors, and defined risk policy.► Established mobile payments security framework aligned to ISO27000 standards. Stratified partners into 3 tiers and established team of assessors from participating merchants to conduct tier 1 vendor assessments.► Led security for enterprise project to open 300 stores in Canada. Provided security requirements, and led security implementation, testing and roadmap to achieve rapid PCI compliance. ► Integrally guided security for Everest project to bring Target.com from Amazon.com’s hosting platform to in-house. Outlined risk profile, and created security controls and requirements.

Minneapolis, Mn, Us

I joined the organization to provide strategic leadership over a series of projects that would achieve regulatory compliance for the bank. That involved managing initiatives valued at $1 million+. ► Assumed control of Password Vault project, to replace manual, inefficient, error-prone password checkout processes with uniform process to check out, store and manage privileged IDs. ► Designated to guide Key Management initiative, which bloomed into a full project to lay foundation to transition from software-based solution to higher-security hardware-based, PCI-compliant solution.► Appointed to Foundstone project to assess low functionality and devise corrective plan. Project objective was to bring in-house quarterly vulnerability scan process, necessary for achieving PCI compliance.

At this time, I was recruited to establish technology infrastructure, which would ultimately become the leader among PEPNet’s four regional centers. PEPNet is a national organization serving institutions of higher learning by coordinating funding to comply with ADA mandates pertaining to students with deafness and hard of hearing. Also, I designed curriculum for the Advanced Network Security Program, and taught Operating Systems, Advanced Networking and Advanced Network Security. Awarded for Outstanding Adjunct Service in 2002.► Directed the launch of trusted national data center as JV between PEPNet and Saint Paul College, then hosted PEPNet’s national services.► Deployed integrated national Blackberry wireless solution which served as communication link among deaf and hearing professionals and the US Department of Education.

Master Of Science, Information Technology & Security

Bachelor'S Degree