Mark Trimmer Email & Phone Number

Charlotte, Nc, Us

Frankfurt Am Main, De

Frankfurt Am Main, De

Frankfurt Am Main, De

Responsible for the implementation and management of the compliance process across all North American customers. Manage contractual obligations for audit and compliance and mitigate audit risk and potential penalties.Secondary role as the Business Continuity Manager for North America responsible to develop and maintain a continuity strategy to ensure operations across a wide range of business critical services.• Implemented a readiness strategy to mitigate penalty risks of over $500k annually• Developed continuous monitoring for key customers to ensure key controls• Developed an internal and external communications plan to raise awareness, drive high performance, and communicate risk areas

Frankfurt Am Main, De

Responsible for the Security & Compliance of all ICT services provided globally on a $1.3 billon dollar outsourcing contract to Shell. Functional ownership of Audit Management, Security Incident Handling, and Security Risk Management.• Transformed the department from a compliance focus into a full service organization including governance, risk, architecture, emergency response, and audit management• Recruited and managed top-tier Security experts to achieve customer goals• Acted as the single-point of contact for all Security Management activities around the globe and engaged with customer management and executives• Responsible for contract interpretation, negotiation, scope expansion, and renegotiation• Led a multi-year / multi-million dollar Information Risk Management suite of projects developing the next generation of security services including a secure hosting platform for highly confidential information and continuous security monitoring for enterprise databases• Successfully supported contract negotiation for a 5 year extension

Frankfurt Am Main, De

Responsible for the transition and transformation of security governance for all global services provided to Philips.• Performed current state analysis and identified gaps for treatment• Led the customer through new and developing processes to achieve common goals• Developed method to provide security maturity metrics from supporting organizations

Frankfurt Am Main, De

Provided Information Security Management governance, services, and subject matter expertise as a strategic outsourcer to multiple customers throughout North America.• Managed a team of information security and disaster recovery specialists• Process owner for ITIL Information Security Management function• Engineered security service offerings for prospective customers• Reduced operational costs for security services across several customers• Negotiated security and privacy terms in contracts and service agreements• Supported global Security and Data Protection / Privacy programs

Livonia, Mi, Us

Responsible for the design, implementation and management of technical information security requirements and controls at a $6.1 billion dollar Catholic health care organization encompassing 46 hospitals and approximately 45,100 full-time equivalent employees.• Superimposed HIPAA requirements on ISO 27002 for standardization in implementation• Designed the information security governance model and associated processes• Developed enterprise information security metrics• Created and implemented a quantifiable risk assessment methodology• Developed an enterprise information security architecture• Process owner for ITIL Information Security Management function• Managed relationship with internal and external audit functions• Provided security oversight and direction for IS strategic initiatives including Identity & Access Management, Single Sign-On, Patch Management, and Next Generation Workstation Design

Auburn Hills, Mi, Us

Contracted to design, develop and implement enterprise security architecture and operations for the financial services arm of a global automotive company. Responsibilities include developing, maintaining and enforcing security policies and standards; and providing security architecture and support for technology projects throughout North America.• Applied ISO-17799 best practices to Sarbanes-Oxley and Gramm-Leach-Bliley compliance efforts• Expanded current risk assessment process to include quantitative data• Provided project guidance on information security issues

Carmel, In, Us

Responsible for the management and oversight of the Security Administration department in a 24x7, real-time, high availability (99.996%) environment that manages a large portion of the nation’s electric power grid and the developing Midwest Market which was planned to traffic almost $1 billion a month in energy trading beginning in March 2005.• Responsible for compliance efforts for NERC 1200 – Cyber Security (Urgent Action) and Sarbanes-Oxley security requirements• Conducted annual security assessment, vulnerability scans and risk management program• Designed and implemented an e-commerce security architecture using Web Access Management and x.509 digital certificates• Implemented a tiered and product diverse security architecture including firewalling (Checkpoint, PIX), IDS / IPS (TippingPoint, ISS, Snort) and vLAN technology• Developed a “hot-site” disaster recovery and business continuity plan for security infrastructure

London, England, Gb

Provided coordination of information security efforts and services for a $3.2 billion dollar aerospace, marine and energy company.• Conducted security assessment, risk review and management reporting• Developed methodology for using open source security assessment tools to create management reporting on technology risks• Assigned to Rolls-Royce, plc (global) for one month to manage penetration assessment of a hardened web hosting facility in the United Kingdom• Assisted with the design of a global identity management solution integrating LDAP and Active Directory solutions• Managed security deviation and documentation processes• Responsible for maintaining security requirements through change control process• Led investigation and incident handling processes for both IT Security and Ethics using appropriate data collection and forensic techniques• Secret clearance with the Defense Industrial Security Clearance Office (DISCO)

Worldwide, Oo

Responsible for maintaining technology services for a mobile workforce including workstations, remote connectivity, network applications, disaster recovery mechanisms, and telephony services.• Responsible for budgeting and planning for multiple divisions within Indianapolis• Managed project to move all office technology services including network and telephony systems into new office space• Implemented an office-wide hoteling application to more effectively utilize office-space • Designed and established a GAAP compliant storage regimen for electronic audit documents including disaster recovery standards and document retention policies

Us

Position included tier-II responsibilities for maintaining a complex integrated environment containing multiple operating systems and network topologies.• Designed network solution to extend hospital systems into physician practices• Managed project for installation, configuration and ongoing maintenance of WAN connectivity including cost justifications and allocations• Provided architecture and project management for the campus wide extension of hospital network and telephony solutions to ancillary buildings• Created IP implementation scheme, dynamic routing requirements and integration plan

Contracted to maintain existing engineering systems and implement new technology to facilitate operations.• Assisted with Novell 3.12 to 4.1 migration• Implemented an electronic bulletin board system to facilitate drawing transfers

Business Management

Business Management

Applied Computer Science

Education record