Michael Cox Email & Phone Number

I have responsibility for quality control of all client deliverable materials, including but not limited to: Assessment gap reports and associated evidence in accordance with PCI SSC reporting and QA guidelines; completing in depth reviews of Reports on Compliance (ROC) and Report On Validation (ROV) documents, along with associated attestation (AOC and AOV) documents; penetration test report reviews for internal and external tests; data breach forensic investigation reports for payment card brands; and cybersecurity review reports based on ISO/NIST CSF.

Provide Audit/Risk/Compliance consulting services to CTO organizationPartner with application security control owners and infrastructure oversight organizations on regulatory items

Manage information security staff in development, implementation, and monitoring of the PCI Compliance ProgramDirectly contribute to the conceptual design of security controls to meet requirements aligned to PCI DSS, including: network, application and infrastructureDevelop Quality Control plan for PCI assessment activities

Plan, coordinate and perform all testing for annual PCI-DSS audit Conduct risk-based audits; including reviews of IT Program, deliverable completion status and measurement of customer use of delivered IT components.Perform test steps designed to evaluate adequacy and effectiveness of IT Security controls (SOX and GCC) for applications, network and infrastructure

Implement Software Quality Improvement Program, enhancing team standards of excellence, based upon Information Technology Infrastructure Library (ITIL) framework principles