Larry Francisco, Cissp Email & Phone Number

New Jersey, United States

Atlantic City, New Jersey, United States

Technical Specialist providing expert Security guidance and acting as a liaison between security teams and five assigned systems. In this role, I provide documentation support for the security authorization process that includes annual assessments, Information System Continuous Monitoring, web scans, an ad hoc audit requirement. I ensure these documents are up to date for the current FY with the systems most recent status, diagrams, and planned changes. Additionally, I work closely with the Information Security Officers, System Managers and System SMEs to review test results from annual penetration scans as well as Quarterly and supplemental web scans to ensure accuracy and timely responses to the test teams. I periodically work with audit, records management, privacy office and data call teams to collect data for my systems and provide critical time sensitive data.

Wilmington, Delaware

• Leads security engineering and operations for Wilmington Trust business lines and the corporation. • Mentored and developed respective team members on support and technical implementations.• Directly manage best-in-class security tools and technologies, deliver seamless client security solutions, ensures availability of a defense-in-depth architecture, and manage 24x7 operations support.• Maintain superior technical skills, a willingness to learn new technologies, and a team approach to ensuring successful security engineering and operations.

• Responsible for the monitoring, researching and reporting of security and privacy incidents/breaches corporate wide. • Assists in developing, maintaining and publishing corporate information security standards, procedures and guidelines for enterprise computing platforms.• Provide technical guidance and training to business owners and other IT staff while being responsible for the management of Information Security projects and technical aspects of those projects.

• Responsible for the monitoring, researching and reporting of security and privacy incidents/breaches corporate wide.• Provide computer forensics in response to HR, Special Investigations, Legal and law enforcement agencies.• Monitor compliance to the Information Protection Policy, HIPAA Privacy/Security standards, GLB and other federal/state legislation that deals directly with information security/privacy.• Manage and monitor corporate wide anti-virus and intrusion detection controls; invoking crisis/emergency action processes as warranted.

Enterprise Security Architecture for Network, Information Systems and applications. Provide secure reliable solutions to core business applications and projects.

• Responsible for the design, configuration and implementation of all security encompassed in the $1.7 million DMZ re-design project. • Enterprise Security Architecture for Network, Information Systems and applications. Provide secure reliable solutions to core business applications and projects.• Responsible for the design and execution of a corporate wide secure remote access solution facilitating a nationwide sales force and critical in house engineering group.• Implemented a central syslog server that tracks all denied attempts from perimeter router and critical network infrastructure devices. Logged and alerted real time based on specific keywords.• Configured and managed 13 Sun OS Checkpoint Firewalls for Corporate Enterprise environment.• Configured four peer to peer VPNs between corporate environment and nationwide partners. • Provide network and host vulnerability and risk assessment for corporate wide standard and auditing functions.• SSL Certificate Issuing Authority for all domains associated with corporate web servers. • Policy designer and enforcer using Netegrity’s Siteminder Policy Server administration.

• Responsible for the implementation and operation of infrastructure and network protection strategies for a 5000 user data network, comprised of NT, Novell, and Unix operating systems running over an Asynchronous Transfer Mode (ATM) backbone, worth over $100 million.• Experienced with Cisco Ethernet and ATM switches, and Cisco routers. • Experienced with Remote Access Solutions, Virtual LANs, Dynamic Host Configuration Protocol (DHCP), Windows Internet Naming Services (WINS), domain Name Service (DNS), and Proxying.• Experienced with Automated Security Incident Measurement (ASIM), On-line Survey (OLS), Internet Security Scanner (ISS), HP Openview, Enterprise Security Manager (ESM), Axent Intruder Alert (ITA), and Sidewinder Firewall.