Kerry Kane, Mba, Cissp, Cism Email & Phone Number

Greater Phoenix Area

Advising clients on Information Security Governance and Regulatory issues, IT Risk Management and Compliance, and Enterprise Security Programs

Phoenix, Arizona Area

▪ Manage the daily operations of the Business Information Security Office (BISO) which partners with Senior Leaders and their teams to securely operate more than 900 distributed applications across 30,000 servers. ▪ Oversee IT risk, information security, and compliance for all enterprise platforms, including Loyalty, Accounts Receivable, Salesforce, and Global Customer Serving.▪ Manage a $1.7 Million operating budget and oversee a team of 60 employees across 3 Unit CIO teams. Directly supervise 5 Information Security Managers and Information Security Analysts.▪ Provide leadership to Technology and Business teams for 20 domains and advise on methods to secure and protect their applications and customer data. ▪ Partner with 3 Unit CIO teams to understand the measurement of, and risk-reducing actions available for, 100+ Key Risk Indicators for IT and IS. ▪ Track progress of technology risk issues, meet weekly with Risk Champions from each area and advise and coach them on methods to reduce and manage risk effectively. Key Accomplishments▪ Designed and launched “Application Health” across all Technology teams in 2019, a simplified mechanism for displaying Inherent and Residual risk for application owners. Successfully drove overall risk reduction by 18% in the 1st 6 months of operation in 2019 and achieved a 28% risk reduction to date in 2020.▪ Partnered with Technology teams and Security Control Owners to migrate infrastructure vulnerability reports from a monthly spreadsheet-based process to a daily on-demand process that leveraged a technology risk portal. Reduced high risk infrastructure vulnerabilities by 75% in the 1st year of migration and enabled improvements such as re-scan requests and on-demand assistance.▪ Created and established the BISO role in 2016, serving as the primary Information Security liaison to 9 Unit CIO technology teams, coordinating 60 Risk Champions to manage security and compliance actions across those teams.

▪ Provided leadership to Engineering and Development for Access Management of all AXP Technologies, including customer and employee Single Sign-On. ▪ Developed and implemented new identity management services, including Mobile, Biometric, Step-Up Authentication, OAuth, VPN, Certificate Management, and Claims-Based Identity Services. ▪ Managed a $10+ Million operating budget and oversaw a team of 14 colleagues and 70+ contractors. Directly supervised 14 Engineers and Project Managers.▪ Monitored security breaches and developed tools to reduce malicious attacks on American Express applications. ▪ Led authentication integrations, including securing new applications, federated identity solutions, and deliveries. ▪ Complied and revamped the Access Management strategy annually. Updated it with current needs for availability and new authentication features and secured funding to execute plans. ▪ Oversaw and managed the delivery of new integrations for authentication and authorization services, including standard integration models and those with new capability needs. ▪ Managed system availability at >%99.99 for production and pre-production environments and enabled automated regression and capacity testing to ensure robust new product releases. Key Accomplishments ▪ Enabled SSO as the 1st Geographically Distributed, Highly Available (GDHA) distributed application at American Express to support the development of a 2nd AXP datacenter. Successfully certified the solution to enable savings of more than $800 Million annually. ▪ Won the AXP Chairman’s Award for Technologies Excellence in 2013 for delivering GDHA and achieving the highest availability rating in the financial services industry.▪ Delivered multiple “First AXP Implementations”, including a Certificate Management System, an automated datacenter failover, OAuth and SAML Federation, Mobile and Biometric authentication, and Claims-Based access, enabling step-up authentication for fraud reduction.

Phoenix, Arizona, United States

▪ Completed 3-year platform strategies for Web Services and Messaging Utilities. ▪ Implemented a simple PKI certificate acquisition system with a 3rd party vendor, Cybertrust, which was acquired by Verizon, to increase security for application web service implementations.Key Accomplishments▪ Delivered the 1st web services UDDI Registry at AXP, which housed 300+ entries, promoting re-use and security, and established web services & SOA standards, tools, and infrastructure in use by over 200 applications▪ Developed and implemented a plan to improve employee engagement scores by an average of 14% in all measured dimensions. This included increases by 22% for “My Leader” and 28% for “Teamwork”.

Phoenix, Arizona, United States

Peoria, Arizona, United States

▪ Founded and managed a software consulting company that grew to peak revenues of $3+ Million and employed more than 35 consultants. ▪ Successfully negotiated contracts with local companies and provided consultants to companies such as Honeywell, Motorola, and American Express. ▪ Led Technical delivery teams responsible for development of various B2B and B2E, web-based systems to support both customer and helpdesk style functions for businesses. ▪ Developed and launched Online Wallet and Smartcard reader merchant form filling technology, Corporate Purchasing Card website, Small Business Services website, Quicken Financial management and modernized Customer Servicing tools.▪ Operated the business from the ground up and completed all business tasks, including interviewing and hiring, bookkeeping and accounting, contract management, payroll, and tax filing.

Mba, Masters Of Business Administration

Bachelor Of Science (Bs), Computer Science; Math Minor

Computer Science and Math majors