Mark Rivas Email & Phone Number

Harrisburg, Pennsylvania, United States

Dedicated to maintaining highest standards of customer experience and data protection for a seamless and secure online presence. Build efficiency and automation for Information Security Governance, while cultivating an empowered and secure mindset for online safety.Leveraging digital strategies to enhance security and compliance.Conduct vulnerability assessments and overseeing remediation efforts.Monitor IT compliance controls for both cloud and on-premises solutions.Ensuring effective IT processes and controls managed to appropriate risk levels.Conducting due diligence on third-party compliance.Participating in incident response investigations and managing IT infrastructure security.

Hershey, Pennsylvania

Human Risk/Security Awareness:Fulfills a critical role as the single team member to implement new Security Awareness program, creating cross functional partnerships to establish Training, Education and Response within the entire Organization as a learning standard. Promoting best practices to safeguard the company from cyber security threats, such as Social Engineering, impersonation, and fraud attempts. Tracking and reporting Human risk metrics to the Chief Information Security Officer.• Leads information security and risk management training for the entire organization.• Measures and reports Human risk metrics to the Chief Information Security Officer.• Defines policies, procedures, and best practices to safeguard the company from cybersecurity threats, such as Social Engineering, impersonation, and fraud attempts.• Deployed security awareness and Email triage programs across the entire organization which included an email security program that prevented Brand impersonation, changed human behavior and promoted a positive Cyber Security Culture.• Monitors Global Cybersecurity trends to proactively identify and mitigate new and emerging threats with potential to impact the company.Identity and Access Management:• Established Identity & Access Management controls to track accounts with higher administrative privileges.

Hershey, Pennsylvania

Engaged with Team leaders to identify, measure, and mitigate risk, while assuming a lead role overseeing third party risk and SAP Vulnerability management.· Created automated controls to reinforce internal systems and processes to verify and validate ongoing effectiveness.· Established guidelines to identify and reduce vulnerabilities in SAP environments.Third Party Risk and Vulnerability Management:• Manage Third Party Risk program to new vendor utilizing new efficiencies and customization of review items required.• Maintained accountability for third party risk and SAP Vulnerability management.• Defined guidelines to identify and reduce vulnerabilities in SAP environments.Security Awareness:• Implemented a formal program to establish a new Security Education and Awareness program for Training, Education and Response within the Organization to help prevent threats, such as Social Engineering, impersonation, and fraud attempts.Identity and Access Management:• Separation of standard accounts with elevated privileges to an exclusive Admin accounts, monitor and report the elevated accounts to ensure compliance.

HITEC Emerging Executive Program is a year-long, cohort-based program that develops emerging and high-potential technology leaders looking to excel as high level corporate executives. The work of the Emerging Executive Program continues to be central to HITEC’s core mission – to develop future Hispanic technology and business leaders.The "giving back” nature of this program is two-fold: the program provides a unique opportunity for the participants to broaden their experience in industry related HITEC activities, such as local market activities. Additionally, it also allows participants to support future generations of undergrads or teenagers embracing technology practice via role modeling. Through the participant’s agreement we provide guidance and options on how to support the global village we live in.

Hershey, Pa

Advanced through multiple roles as a contractor before joining the company as a full-time employee. Scope of accountability serving as Lead Analyst for security endpoint applications, monitoring networks, and fully documenting and reporting security incidents. · Influenced the assessment, procurement, and implementation of information security management systems. · Developed full insight into the landscape of threats, including attack vectors and potential attackers. · Provided guidance to penetration testing activities and vulnerability assessments, elevating concerns to key stakeholders. Leveraged the use of Splunk, Qualys, Onapsis and Symantec MSSP. · First resolver for Identity Management and Cyber Defense teams to provide users precise Security access as well as proactive efforts to reduce risk and minimize vulnerabilities using Splunk, Qualys and Symantec MSSP data. · Joined the company as a Client Support Technician in a contractor role, providing deskside support on issues impacting the performance and availability of hardware and software applications. Developed relationships within the organization that helped to guide career and learn key details about the business, expanding viewpoint to understand how technology can be a better enabler, helping critical business groups embrace technology solutions to better protect the organization.

As a Systems Analyst, Mr. Rivas provided Support and maintenance of 511 Advanced Traffic Management Systems for several state transportation agencies. Responsible for data center operations and corporate IT responsibilities within Windows XP/7 environment, supporting 250 users in Toronto, CA and 1,400 users within the United States. Other duties included maintaining computer inventory to ensure recycling and donation of all equipment was handled properly during a corporate Windows 7 upgrade project. During the PA Turnpike EZ-Pass Validation Project, Mr. Rivas was a Lead Systems Administrator for Dell workstations, servers, disaster recovery systems and traffic camera equipment. While on site during simulated Toll scenarios he confirmed that system interfaces were functioning at an optimum level and compiled reports for Executive team on system performance and data quality, solving issues that could impact test schedule goals.

York, Pennsylvania Area

Performed first level hardware and software support on Dell desktops and laptops in an XP environment for 650 users and maintained Blackberry cell phones and software for 300 users. Multi-tasked in a high-call volume environment, created and resolved incidents for all end users within Service Now.

Bachelor’S Degree, Information Sciences & Technology

Associate'S Degree, Business Administration And Management, General

Managing Human Risk

SANS 433 is a cyber security leadership course that prepares you to effectively measure and manage your human risk by establishing a'.