Matthew Bambrick, Mba, Msia, Msbc, Cbcp, Ssap Email & Phone Number

London, Gb

Tempe, Arizona, Us

Hired to assist with maintaining physical security and in conducting the timely assessment, investigation, evaluation, and reporting of physical and cybersecurity incidents. Assists in the development, review, and update of appropriate policy, procedure, and standards to maintain corporate compliance with all relevant regulations. Successfully identifies deficiencies and addresses improvements, as well as monitors compliance and enforcement of security policies.Coordinates proactive development and updates to policies, plans, procedures, and ensure record-keeping of evidence with internal organizations to comply with NERC-CIP requirements.Contributes to the development of processes to identify, quantify, analyze, and report on NERC-CIP compliance status; develops and delivers security awareness training and education programs including the NERC-CIP training as needed.Effectively reviews the implementation, documentation, testing, and monitoring of security solutions and associated security compliance regulations; spearheads and completes special projects, assignments as requested.Uses a combination of automated tools, manual methods, and interviewing techniques to gather the information necessary to report on security risks; authors written reports summarizing findings and recommendations.Conducts advanced future regulation review and acts as an escalation point for customers with program questions and concerns; establishes and supports standards to increase efficiency.

Phoenix, Arizona, Us

Successfully identified network vulnerabilities and developed a comprehensive plan to secure the entire computing network. Monitored network usage to ensure compliance with security policies and collaborated with management to improve security. Led, oversaw, and managed the development and placement of the company’s computing and information security requirements, policies, standards, and procedures for information systems associated with PCI-DSS and GDPR. Increased 20% positive feedback metrics by updating the corporate information security awareness presentation; responded to security incidents promptly and recommended necessary changes to prevent future incidents.Consistently featured as a cybersecurity presenter at Best Western Hotel and Resorts annual convention from 2017 to 2020 and received excellent presenter feedback ratings.Crafted and implemented the physical security response plan for the cardholder data environment (CDE); developed a traceability matrix to identify PCI compliance gaps and an annual training and awareness calendar.Played an instrumental role in minimizing risk by identifying and receiving management buy-in for access control’s single process; provided security awareness material for incorporation into the HR’s new employee orientation.Trained and mentored employees and collaborated with third-party vendors to ensure property payment management systems adhered to PCI-DSS compliance; conducted interviews for PCI-DSS artifact collection, review, and storage.Liaised effectively with all third parties as they pertain to information security governance, risk and compliance policies and standards; delivered payment card industry data security standards (PCI-DSS) training and awareness programs.

Chicago, Il, Us

Led the development and implementation of all physical security programs to protect facilities, assets, and employees. Interpreted and applied standards, policies, best practices; analyzed threats and vulnerabilities, as well as designed system security strategy and architecture. Supported all physical security, investigations, compliance, and business continuity programs throughout the corporation. Led teams and promoted the use of security requirements for IT infrastructure protection.Planned and implemented numerous executive protections, facility, and high-profile visitor security missions with 100% success; trained new corporate security employees and managers that facilitated efficient on-boarding processes.Spearheaded 30+ site physical security vulnerability and threat assessments for Exelon power and operating company utilities within multiple geographic locations resulting in an 80% recommendation approval rate for implementation. Facilitated process improvement while monitoring security vulnerabilities; slashed false alarms by 50% as a result of developing and implementing root cause analysis and instituting updated training and awareness campaigns.Strengthened security measures for newly acquired executive aircraft by ensuring on-time execution of the security equipment installation project with a $100k budget for corporate aircraft hangar facility.Part of the team that closely monitored and conducted security and threat intelligence duties in support of the 2012 NATO Summit held in Chicago resulting in zero incidents to facilities, assets, or employees.

Chicago, Il, Us

Gathered reports on targeted threats from all sources, performed vulnerability assessment, and liaised with team members to identify, document, and conduct operational test and evaluation activities. Evaluated systems based on security requirements and assessed security controls, as well as the level of residual risk of systems. Ensured that all critical data and infrastructure were safeguarded by enabling the appropriate security controls.Enforced nuclear security measures and ensured smooth functioning of data processing activities by conducting nuclear cybersecurity risk assessments per 10 CFR 73.54 and NEI 08-09 and executed tests of data processing systems.Formulated resolution of highly visible vulnerabilities identified; effectively reviewed, and initiated NEI 08-09 Rev. 6 industry solicitations for input and comment that resulted in 5 corrective actions completed before publication.Maintained critical digital asset (CDA) inventory for the nuclear fleet that ensured compliance with NEI 08-09 Rev. 6 standards; adhered to nuclear regulatory commission (NRC) cybersecurity policies and compliance procedures.Guided leadership, peers, and subordinates in tactics techniques, and procedures.Gained valuable experience in many aspects of computer security technologies including operating vulnerability scanners, and network detection used in the performance of daily activities and to perform assessments and audits.

Chicago, Il, Us

Troubleshot and resolved advanced regulatory/technical problems in support of electrical power operations. Significantly increased the compliance profile by identifying gaps within processes and procedure statements to ensure they align with current quality standards. Enforced internal controls and policies designed to ensure that all compliance needs were met. Gained vast knowledge in the ability to read and interpret regulations.Achieved 100% deficient-free findings on multiple sites with maritime security regulations by leading and coordinating all regulatory compliance security protocols.Effectively determined compliance-related priorities and reviewed documentation, processes, and practices to enact regulatory compliance strategies.Ensured full compliance with NERC CIP 009 recovery plans for critical cyber assets by performing and executing the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection drill.Liaised effectively with the US Coast Guard on annual site security audits per code of federal regulations.

Chicago, Il, Us

Achieved unplanned downtime by establishing all crisis management, business continuity, and disaster recovery procedures for critical IT systems. Streamlined all applicable systems and successfully implemented BS25999 and NFPA 1600 standards to produce an industry-standard continuity program. Delivered cost savings of $6K from AT&T incident management contract renewal and improved/updated procedural process. Improved system recovery time by 50% through the development of improved business resumption scripts.

Chicago, Il, Us

Managed the performance of data center operations, critical IT systems, and supported global network operations during the shift. Examined and escalated issues and achieved a 90% service level agreement (SLA) rating by examining and escalating all severity-level incidents for immediate resolution. Slashed 75% script execution time and received director-level, formal recognition on business resumption standards implementation for critical systems. Spearheaded all planned system maintenance outages during the shift to achieve minimal downtime.

Houston, Texas, Us

Arlington, Virginia, Us

Doctor Of Education - Edd, Educational Leadership

Master Of Business Administration - Mba

Master Of Science - Ms, Information Assurance

Master Of Science - Ms, Business Continuity Management

Graduate Certificate In Teaching And Learning

Certificate In Corporate Compliance & Investigations

Bachelor Of Arts - Ba, Organizational Management