Mark Petersen Email & Phone Number

Milwaukee, Wisconsin, Us

Information security risk manager for several business divisions of a leading fintech firm. Conduct security vulnerability reviews for application code and system architectures based on code scanning system reports and submitted architecture diagrams. Work with code vulnerability tools and metrics to advise on cybersecurity and vulnerability management risks and facilitate application vulnerability remediation as part of cybersecurity risk management processes.

Security incident response manage responsible for all security incidents and processes through outsourced cybersecurity operations center (CSOC). Developed and enhanced approach to cybersecurity incident management based on Mitre Att&ck methodology with a baseline of known tactics and techniques and a view toward business risk management. Tracked and resolved security incidents and zero-day vulnerabilities internationally for locations in more that 40 countries. Worked with various law enforcement agencies around the world to document cases against illegal cybersecurity bad actors. Maintained service levels and communications at all levels of management based on predefined security incident management planbook/runbooks.

Pl

Security planning and playbooks, operations runbooks, and training engagements with private and government contractors involving U.S. critical infrastructure installations. Security clearance.

Completed long-term educational goal.

Bridgewater, New Jersey, Us

Senior Program Manager/Senior Info Sec Leader• Hired to realign full-scope security program with business, functional, and technical requirements & specifications ($200,000,000 Program)• Two-year assignment• Executive Security Playbook/Runbooks• Program Management Office• Cloud computing• Linux virtualization• DR hot site (400+ instances and servers)• Secure Software Development Lifecycle (S-SDLC)• Worked two years implementing iconectiv (Ericsson Telcordia, previously known as Bell Core) S-SDLC development processes• Product architecture & software development (scrum agile development framework)• Systems engineering/devops: Led security technology selection• Established security project work-streams internal and external threat assessments, security information and event management (SIEM), identity and access management (IAM), and application and perimeter firewalls, data center and physical security, staff vetting, advanced persistent threat (APT) and threat and vulnerability management (TVM), security compliance audits, third-party risk assessments and supply chain risk management (SCRM), and aligned cybersecurity operations center (CSOC) processes and standards• Developed security checklists for solution readiness• Led process development and implementation for third-party supply chain risk management (SCRM), aligned operations security incident response plans (SIRP), arranged and oversaw vulnerability scanning, penetration testing, and remediation across all primary and secondary environments (production and non-production)• Partnered with the corporate, suppliers, professional development staff to promote security awareness and training• Hands-on experience with security technologies, writing/directing all levels of business and technical documentation• Production Operations: Led activities to implement new cybersecurity operation center (CSOC) for NPAC

New York, New York, Us

Chairman, Global Key Management (KM) Working Group for IS Risk Op Committee• Improved/centralized certificates• Aligned KM/encryption standards (ISO2700X, COBIT, PCI)• Developed base standards for crypto KM (asymmetric/symmetric) for network, systems, apps• Developed business requirements for central KM solution• Provided subject matter expertise• Conducted inventory reviews (use cases)• Established CoE to improve compliance/controls for KM/encryption architecture (CIO-level approvals)Program Mgr/Scaled Cert ManagementLed project management (PMI/PMF) with phases:- Wrote, approved documentation- Obtained budgets, presented cost savings- Accountable for solution sourcing and delivery (controlling)- Led communications for senior mgmt, training for end-users- Reported deployment and spending metrics to senior management• Provided subject matter expertise relating to digital signatures, email encryption, identity and access management, authentication, and authorization• Reduced costs by centralizing certificate management• Deployed custom client code to reduce security risks related to Microsoft Active Directory and simplify implementation• Upgraded infrastructure to realize cost savings with cloud virtualization and support diverse end-point solutions• Managed global privacy reviews for file and email encryption involving more than 100 countries• Improved threat and risk mitigation by conducting risk reviews and influencing secure-software development lifecycle at engineering, unit, system and user acceptance testing, operational process levels• Centralized encrypted email solutions for internal users, globally (~250,000)Co-Project Manager/Product Owner for Data-At-Rest Scanning (DLP) ImplementationDeveloped statement of work (SoW) including:- Design for system scanning platform for data centers- Scanning and business notification policies for PII, PCI within unstructured data file systems- Performance metrics for ongoing metrics

New York, New York, Us

Incident Manager on Cyber Security Incident Response Team (C/SIRT)Directly involved in activities for hundreds of internal and external (cyber security) incidents:• Participated in Daily Incident Triage• Supported Legal and HR Investigations• Provided Guidance to Security and Operations Staff • Led Incident Resolution Activities for Complex Security Issues• Recommended Process ImprovementsImplemented Incident Metrics Reporting for Senior Management (All Regions)

New York, New York, Us

Data Protection Team LeadTechnical leader, Fast Track Programs, identified new information security solutions, established IS technical standards to alignment with IS policies, and globally coordinated international IS technology group meetings (core team and plenary meetings).Solutions:• Conducted hands-on IS technology research evaluations• Shepherded IS multiple efforts across security domains• Leader involved with centralizing out-going network content monitoring to prevent unintentional data leakage• Leader involved with centralized encrypted email solutions for external customers• Managed multi-year, global IS program deployment budgets• Managed Staffing Requirements with Focus on Minimized/Reduced Cost, Improved IS CapabilityIS Policies/Controls/Compliance:• Published insider threat working papers• Developed IS policies/technical standards• Improved IS compliance/controls for security (for CIO-level approvals)• Developed Insider Threat/Risk Mitigation Strategy• Influenced Secure-Software Development Lifecycle Standards

New York, New York, Us

Led and managed multiple efforts, including end-point controls and encryption solutions for desktops and laptops (includes USB, CD/DVD, chip cards, other potable media, data leakage protection, intrusion prevention, data protection). Accomplishments included delivery for:• Business Requirements• Request for Proposal (RFP)• Technical Requirements• Supplier Short List Recommendation• Leader of Global Advisory Committee (Formal Alignment of Business/Technology Working Group)

New York, Ny, Us

Provided expertise for various security systems, developed business and technical documentation including, but not limited to, RFI/P for procurement and project teams, business requirements for business leaders, functional and technical specifications for vendor contracts (SoW). Also developed service level agreement (SLA) for JPM Investment Bank IAM support organization.

Led definition, initiation, planning, product selections (RFP), and implementation for various security systems (scaled deployments)Encryption systems with key management and recovery processes including, but not limited to, - Integrated LDAP directories, - Public key infrastructures, - Secure electronic mail, - Secure physical media transportNetworking enhancements for global firewall redundancy- Routing protocol upgrade to OSPF on Cisco WANNetwork Security- Intrusion detection and prevention systems- Vulnerability scanning for network servers and end user computing- Wrote contract SoWs for penetration testing, vulnerability reporting, and remediation planning/implementation for Internet connected systems