Leo Park Email & Phone Number

New York, Ny, Us

New York, Us

Click Therapeutics is the industry-leading DTx IT platform provider to global pharmaceuticals like Otsuka and Boehringer Ingelheim.Design, develop, and implement the company's security, data protection, IT risk management, and other IT-related compliance programs that center around HIPAA, Hitrust, GDPR compliance, and other privacy laws and FDA regulations, including 510k.• Develop, implement and maintain the HITRUST-friendly IT security program.• Develop, update and manage IT security policy and procedure to sustain a high-quality IT security program.• Submit audit and compliance reports to governing bodies, legal entities, and external authorities, helping the company comply with the privacy guidelines(e.g., GDPR) and acquire relevant certificates (such as SOC-1, SOC-2, HITRUST, ISO 27001 etc.) • Manage IT Risk management program, including application, system and vendor, to ensure Compliance with the company's security program with a risk register. • Provide security input in the project to foster a 'security in design.' culture. • Manage security training and awareness programs, including periodic phishing campaigns. • Detect, respond, investigate, remediate and document security-related incidents.

New York, Us

• Develop, implement and maintain the actionable security and compliance policy, procedure, process and report.• Partner with developers and engineers to update, enforce and monitor technical and procedural controls to protect the company's physical and intellectual assets and data.• Develop and maintain a strategy for managing security-related audits, compliance checks, and external assessments.• Create and execute a strategic annual Compliance Monitoring and Testing plan including annual BCP and Incident management drill.• Ensure IT compliance programs meet all industry applicable rules, regulations, standards, and laws.• Track and ensure adequate and timely resolutions to all audit/review issues relating to IT compliance by utilizing the GRC application.• Conduct Third Party risk assessments and manage IT risk register.• Review contracts and QMS documentation.

New York, Us

Design, develop and implement Happify's security, data protection, IT risk management and other IT-related compliance programs which center around HIPAA, PCI DSS, GDPR compliance and other privacy law • Coordinate, monitor, develop, implement and maintain the HITRUST-friendly IT Compliance program. • Create a framework that effectively measures compliance standards with information policies.• Develop and maintain a strategy for managing security-related audits, compliance checks, and external assessments. • Create and execute a strategic annual Compliance Monitoring and Testing plan. • Ensure IT compliance programs meet all industry-applicable rules, regulations, standards, and laws. • Track and ensure adequate and timely resolutions to all audit/review issues relating to IT compliance by utilizing the GRC application. • Review, improve, create, and monitor security processes and company IT policies. • Conduct third-party risk assessments.

New York, Ny, Us

• Manage and improve IT compliance program for the global university and work with other business units regarding compliance programs (PCI DSS, HIPAA, FERPA, GLBA, NYC DFS 500 and GDPR) focused on Personally identifiable information protection. • Lead compliance-related working group with affected department's lead to develop, identify and improve the compliance program. • Lead risk assessment and mitigation through Governance, Risk analysis and Compliance, including overseeing penetration testing, reducing vulnerabilities, and partnering with external vendors to assess risk. • Perform Information technology reviews of the global university, including policies, procedures, application system development lifecycle, change management, and other IT controls to meet compliance requirements. • Manage a team of IT and risk assessors to meet with emerging Compliance and cybersecurity risks and the university's cloud migration, including AWS and Azure. • Manage Risk Register of identified, residual and accepted risks.

New York, Ny, Us

• Prepare and manage federal, state, and internal IT audits by NERC (North American Electric Reliability Corporation), DPS (Department of Public Service), and NATF peer review. • Prepare and perform mock audits of the Cyber Security compliance program and manage 3rd party assessment and gap analysis by Big 4. • Prepare audit document packages and participate in on-site, off-site and spot-check audits. • Manage cybersecurity program (NERC CIP) for High-impact cyber systems of Energy Control Center with RSA Archer. • Perform technical, administrative and quality assurance tasks related to the cybersecurity program. • Proficient in all NERC CIP cybersecurity standards and proposed standards changes. • Evaluate, monitor and design firewall configurations, IDS analyses and SIEM activities. • Check the baseline of cyber systems and evaluate the discrepancy. • Review and write procedures that detail and identify the processes required to meet compliance with current and changing regulatory standards. • Evaluate compliance tools and methods and work with other organizations to develop and improve automated methods for maintaining and tracking compliance. • Evaluate the impact of pending compliance standards on current organizational policies and procedures. • Work with various groups to identify procedural changes, implement change schedules and manage progress. • Monitor and report on compliance status and conduct evaluations of each area's compliance processes to ensure compliance with NERC CIP reliability standards. • Make presentations to various Company organizations and at the executive level.

Lynbrook, New York, Us

• Manage the PCI DSS Compliance program and audit for the company and work with the CTO for IT budget, and compliance and other projects. • Organize and manage policy development, vulnerability management, and risk assessment. • Set up, optimize and maintain two Windows AD domain environments in two locations and review logs for FIM, system integrity, IP360, and SEIM using Alien Vault and Tripwire Enterprise 8.3. • Manage and address security and control issues with Windows Server, Linux, DB, firewalls, routers, Wifi and Cloud. • Scan external/internal networks regularly for security review to meet PCI DSS requirements. • Set up, configure, review, and manage all aspects of the networks at five different locations, i.e., VLAN, Firewall, IPS, VPN with Checkpoint, Juniper, Cisco, and HP network devices. • Set up, optimize and maintain VMware with ESXi5.5 in multi-locations. • Manage company core data at the data center and cloud environment with MS 2012 SQL Server. • Plan, implement and manage the company's infrastructure in all aspects. • Manage load balancers using HAproxy and Nginx on the Linux environment. • Manage IT team in three locations (NYC, Lynbrook NY, and Americus GA) and review performance annually, then report to CTO.

• Managed and supervised a team of field technicians for over 40 small to mid-size companies' networks and systems. • Setup, optimize and maintain 2007/10 and 2013 MS Exchange servers. • Support many different MS Office suites – 2003, 2007, 2010, and Office 365. • Set up, optimize and maintain Blackberry Enterprise servers in multiple locations. • Reviewed and modified GPOs, AD and other settings according to the client's environment. • Set up, optimized and modified client's network infrastructure in various manners such as firewalls, VLANs, VPN, and Layer 2 flow. • Created documents to modify the entire current system and network specifications. • Surveyed, planned and implemented infrastructure projects in Windows and Linux environments. • Designed, implemented, and did the troubleshooting of multiple projects simultaneously for clients with various vendors, including the merger of two companies' infrastructures in multiple locations. • Provided level 3 support for field technicians. • Worked with vendors for various issues and projects.

New York, Ny, Us

• Provided level 3 support for field technicians. • Upgraded and maintained Windows-based servers/desktops and Avaya phone systems. • Was responsible for supporting end-users with regard to PDAs, workstations and printers. • Managed Windows AD System and Exchange 2003 server. • Upgraded Cisco network devices and an optimized firewall. • Deployed new systems with Ghost images.

• Installed and maintained Windows-based server/workstations. • Installed and configured AV server, Backup, DHCP and DNS services. • As a 2nd level tech support person, answered customer calls regarding network issues and troubleshooted Windows and Mac OS environments.

Master Of Science (Ms), Computer Science

Theology