Michael Pagano - Grc - Governance, Risk And Compliance Professional Email & Phone Number

Jersey City, NJ, US

New York City Metropolitan Area

Information Security / Cybersecurity Professional with 15 years experience working for financial services firms. Adept at Data Loss Prevention (DLP) | Incident Response | Malware Analysis | SIEM | Log Management | Information Risk | Risk Management- Please reach out to me to find out how I can be the solution to your problems!

Jersey City, NJ | United States

• Responsible for executing on risk reduction programs including but not limited to SoD, vulnerability management, DLP, and third party risk.
• Contributed to legal and regulatory compliance by providing valuable input to facilitate risk exceptions and develop corrective action plans, ensuring alignment with industry standards.
• Acted as a key consultant, providing expert guidance to business and technical stakeholders on information security and IT risk topics, ensuring alignment with stringent security standards.
• Established global partnerships with Information Security Officers and Program Managers, collaborating to uphold legal and regulatory compliance across diverse regions, which improved processes, reduce risk, enabled.
• Ensures risks are identified, assessed, mitigated and controlled, and assist Security Incident Response Teams as the Subject Matter Expert, keeping track of identified items via GRC / Archer.
• Provided strategic advice to line of business management on risk issues, emphasizing legal and regulatory compliance in information security and IT risk management.

Montvale, New Jersey

• Subject Matter Expert for the Intrusion Detection System, provided technical support for entire organization.
• Monitored for internal and external threats, risk assess and rate threats.
• Kept track of threats through compliance / threat management tools such as Archer, plus the use of internal systems tracking tools, followed up with each stakeholder / group over time for updates.
• Led threat and vulnerability management conference call with Subject Matter Experts and Key Business Stakeholders, 2x per week, follow up on new business brought forth each call throughout week.
• Subject Matter Expert and trusted advisor to Risk Management and key business leaders and stakeholders. Aided them in interpreting technical vulnerabilities, translating technical risk into business risk.
• Monitored SIEM for potential threat / risk findings.

Montvale, NJ

• Monitored for internal and external threats, risk assess and rate threats.
• Remediation of threats by working with other businesses / groups to remediate, keeping track of items in a Governance, Risk & Compliance (GRC) system.
• Vulnerability scanning.
• Security assessments of threats found, delivered through internal distribution lists.
• Monitored SIEM for potential threat / risk findings.
• Checked and observed other network monitoring tools for potential threat / risk findings, for internal / external threats.