Keith Mccartney Email & Phone Number

Mountain View, Ca, Us

San Francisco, California, Us

Security & Privacy at the leading all-in-one HR solution for the country's economic engine: small and medium businesses.

Redwood City, Ca, Us

Led day-to-day security engineering, security architecture, security operations, data privacy control, and security strategy deployment as part of Informatica’s SOC2 & HIPAA certified cloud service offering. • Engaged directly in security control deployment while building a top-talent security team. • Introduced risk management & prioritization practices to establish a short/medium/long term plan for security maturity across the enterprise. • Security Architecture & control deployment for Informatica's cloud platform and the enterprise systems to support transformation to a subscription business model.

Zurich, Zurich, Ch

Head of Application Security, Member of Executive Staff (2015):• Reduced IT-related risk by prioritizing applications based on exposure, resulting in actionable flaw prioritization and deployment of increased protection via flaw mitigation and application firewalls.• Established a three-provider offshore hub to provide cost-effective scale and an elastic commodity skill pool.• Utilized a LEAN approach to drive continuous improvement in the delivery of security services to the application portfolios.• Developed and implemented an operational risk evaluation framework to drive capital investment prioritization in line with corporate risk models.Head of Application Security & CISO, Enterprise Applications (2014-2015):• Designed and implemented a security model for enterprise application portfolios and propelled implementation of security tools in those portfolios with improved reaction times, continuity of care, and the ability to support critical business functions.• Introduced federated identity as key IT systems migrated to Cloud/SaaS delivery model.CISO, Enterprise Applications & Deputy CISO, EMEA (2013-2014):• Represented IT in the steering committee to implement the Mastering Service Excellence program and enhance the focus on critical shared service delivery. • Increased quality and reduced re-work by establishing an SME network to align the Business and Engineering units.• Created and instituted the target operating model to shift 11 FTE to a service center model and leverage a centrally managed labor pool while maintaining consistency of service to internal customers.Head of Information Security Quality & Strategy (2010-2012):• Developed three multi-year investment programs and business cases for security capital investment totaling $220M over the span of the programs.• Managed the development of the curriculum & led program instruction for the Group Information Security University, a global training program attended by 150+ employees.

Dublin 2, Ie

ENTERPRISE IMPACT:• Facilitated a $2B sales pipeline by leading offshore development teams in the creation of a pipeline prioritization tool to provide updated sales and opportunity metrics. Tool later adopted by other technology service lines.• Conducted a complete security review and risk analysis of a recently acquired business unit for a Fortune 100 client. Implemented a vulnerability scanning tool and assisted with transition strategy design.• Implemented customer-facing SSO (including third-party applications) as the Technical Lead for a global technology client.• Managed the development of a project framework and proposal for an enterprise-wide SSL VPN/Secure Desktop-based remote access simplification strategy.• Directed a large CMMI maturity level assessment. Revised the client's security operating procedure manual to facilitate maturity improvements. Coordinated data collection and reporting between SOX, PCI, and HIPAA compliance teams and the Security Operations Center (SOC). • Delivered new systems and tools to manage data collection and analytics for global retail client's SOC.• Project Manager for a critical PCI User Access Remediation initiative at a global retail client. Developed and implemented new procedures and technology changes to ensure PCI requirements were met.• Carried out a security assessment for a customer-facing financial authentication solution including physical assessment of two outsourced data centers for a technology client and provided recommendations to improve physical, infrastructure, and process security standards and policies.

Bachelor Of Science In Electrical Engineering (Bsee), Specialization In Power & Communications Systems, Certificate In Sales Engineering

Entrepreneurship Boot Camp

Education record