Lisa Zufelt Ms-Tc, Cisa, Ccsk, Ccsp, Cdpse, Crisc Email & Phone Number

Atlanta, Georgia, Us

Livonia, Mi, Us

Mature vulnerability management programs globally for 15+ collocations, hybrid, and cloud environments. Configure, schedule, and analyze vulnerability scans from multiple network and application scanning tools.Lead and mature annual network penetration test from team notification and creation, vendor selection, tracking remediation of findings, providing customer documentation, and updates. Lead and mature annual web application test from team notification and creation, vendor selection, tracking remediation of findings, providing customer documentation, and updates. Coordinate audit and information security activities within new data centers. Liaison for Cloud Service, Operations, Services, Support, and Partner Enablement teams between the Audit, Security, and Privacy team. Assist global workforce with information security issues and remediation plans, act as champion for Security Awareness, SME for Change Management and voice of reason in panic situations.

Livonia, Mi, Us

Manage all vulnerability scans and scanners from multiple vendors internal and external. Research, recommend, and configure external security services. Initiated and implemented vulnerability management program and patching standards for global systems. Review all scan results and system logs to identify abnormal activity and vulnerabilities, follow remediation efforts to the end and report actions taken. Member of the global IRT. Review Intrusion Detection System logs for suspicious activities, verify behaviors, and implement corrective actions as required. Identify failing processes and contact customers to assist in identifying and correcting configuration issues. Assist global workforce with information security issues and remediation plans, act as a Champion for Security Awareness

Livonia, Mi, Us

Develop and finalize audits by documenting audit tests and findings. Gather documentation required to pass various audits provided to current and prospective customers, including SOC 1 (SSAE16 Type II), SOC Type II, ISAE 3402 Type II audits, and US-EU Safe Harbor self-certification audits. Participate in various internal information security initiatives including security awareness training, gather data for metrics reporting, and evaluating information security tools to better information security posture. Perform system and application risk assessments and contribute to the design, implementation and assessment of internal controls to address those risks identified complete phase I application risk assessments for ISO 27001. Recommended and implemented paperless auditing system reducing auditing times and material. Recommended, designed, and implemented VPN and building badge audits. Schedule/configure third party PCI scans of external facing network devices. Attended change control meetings, assisting the global workforce with the change management process. Contribute to updates of information security and privacy policies.

Waterford, Mi, Us

Set up new users and systems on network. Resolved issues with database systems, VoIP phones, and LAN/WLAN. Installed software and hardware including building of computers and servers. Wrote policy and procedures for information systems security.

Southfield, Michigan, Us

14 years of fast paced problem solving and conflict resolution. Conducted interviews and made hiring decisions. Maintained favorable budget margins by designing and implementing inventory control system for Housekeeping and Floor Maintenance Department. Trained in hazardous chemical clean-up and disposal and bio-hazard handling.

Master’S Degree, Technology Studies/Technology Management

Bits, Information Technology Security

Honor Graduate, Petroleum Laboratory Specialist