Les Devine Email & Phone Number

Us

Cyber Risk Manager- Perform risk assessments and Security Architecture reviews of applications.- Consult with the business to ensure applications, data processes/flows, firewall requests follow standards and that risk is minimized.- Open and track risk records (issues/Management action plans) to closure ( including evidence the remediation was completed)- Managed 3 employees- Configuration Management Review board memberApplication Certification & Authorization (ACA) Manager- Previously Managed the Application risk assessment (ACA) program, the associated Archer GRC Application and one administrator. - Performed ongoing improvement to the risk assessment application within Archer, reducing the number of questions significantly and effort required to complete.

New York, Ny, Us

Management of the Risk Assessment process, including:o Liaison with Businesses and MST for Risk process.o Assessment of business requirement and technical solution for data handling, data breach and Company reputation risk potential against IT, Information Security policies and best practices, Data Privacy laws and handling requirements.o Leading Security Council review. Security Council includes Executive / Management representation from Data Privacy, Legal, PCI Compliance, Network and Information Security, Identity and Access Management and Vendor Management.o Risk Assessment Workflow and Process improvement.

Atlanta, Ga, Us

Risk Management Performance of Risk Assessments as part of the SDLC process and new business requirements. Audit Response and mitigationCompliance Management - Defining and Implementing a Compliance Framework Business Partner AssessmentsContract Reviews Self Assessment QuestionnairesProcess definition and improvement.

Information Security Manager for Outsourced Customer. Primary customer interface for overall Information Security relationship for Transition / Transformation activities, Security Policy Development and agreement, Day to Day activities, Security Incidents, new requirements, Risk Management.. Accountable for delivering “end 2 end” Security Services defined in the Contract. Task Management of Information Security Advisor. Management of Transformation, Security policy and process definition

Security Transition of Financial Services Customer

 Provided IT Security advice, guidance and support to Internal and Customer, Service Management and Technical Support teams. Risk and Policy management with Customer Security Interface. Managed compliance to applicable policies and Standards. Support and problem resolution to meet compliance targets. Audit Support IT Risk Management (now Business Controls) Review of Outsourcing customer account, produced observations for input to final report.

Armonk, New York, Ny, Us

IT Security o Provided IT security advice, guidance and support to the CIO, Desk side support and Business Units on standards and processes to achieve satisfactory control posture. o Managed communications and security awareness campaigns on security standards, updates and changes. o Requirements and input to proposals for projects in the infrastructure investment plan. o Workstation security Standard and tool support, driving compliance to 95% compliance target. o Data privacy – managed approval for workstation security tool reporting and updates/changes. o Established measurements and focus efforts in areas of weakness. o Reviewed a number of business units and suppliers against IBM Security Standards. o Security standards, guidelines and process knowledge: Workstation, System (Server & Network), Outsourced Services, Application, Risk Acceptance, Inter Enterprise Services, Wireless LAN, Audit Programs. Business Controls (IBM Global Account) o Developed a management system for control assessments, producing an interlock with business controls, removing duplicated effort and minimizing manual input on Key Performance indicators, Control Assessment status and issues. o Introduced a system for collating of information and reporting, including compliance testing status, defects, risks, issues and audit / review findings. o Managed the competencies to drive UK, Ireland and South Africa (UKISA) to a green status for the Key Performance indicators. o Audit readiness - Facilitation of initial requirements and compliance testing analysis. Managed inventory baseline and update for Europe. o Tracking for resolution of findings (issues, Risk Assessments, processes etc.)

Armonk, New York, Ny, Us

Infrastructure and Security implementation Projects on Lotus Notes infrastructure in EMEA. +/- 700 servers running AIX

Armonk, New York, Ny, Us

IBM South Africa - Projects implementing infrastructure including Lotus Notes,Server Farm,move, Campus LAN, Server Infrastructure.

Masters Certificate, Project Management

Education record