Michael Lampe Email & Phone Number

New York, Ny, Us

New York, Ny, Us

StrategyGovernance, Risk and ComplianceArchitecture and AdvisoryThreat and Vulnerability ManagementSecurity MonitoringIncident Management and ResponseTraining and Awareness

London, Gb

• Established Information Security Assurance function including Threat and Vulnerability Management, Technical Security Assurance, Data Security Assurance and Security Awareness.• Initiated the following projects based on the CESG Top 10 and SANS Top 20 Controls: • Security Information and Event Management System (SIEM) • PCI-DSS Compliance – Requirements gathering and tactical remediation • Network Access Control • Privilege Management • Firewall Management • Security Awareness• Collaborated with CISO to define and manage Information Security Vision, Strategy, Budget and Roadmap for 2011-2014.• Performed: • Project Planning, Budgeting, Resource Planning and Oversight • Vendor Evaluation, Selection and Relationship Management • Management Reporting • Risk Mitigation and Management • Decision making• Managed external consultants to perform scoping of PCI-DSS programme and create detailed card data transaction flows. Shaped further phases of PCI-DSS programme to define requirements and remediate environment.

• Performed assessment of a major stock exchange trading platform based on Cobit, ISO 27001 and FSA Data Security guidelines.• Performed Data Centre assessment for leading clearing house group.• Performed audit and remediation of one of Europe’s largest equity exchanges Information Security system based on ISO 27001, FSA Data Security Guidelines and Data Protection Act.• Created proposals and project plans for various firms involving the Payment Card Industry Data Security Standard (PCIDSS), ISO 27001, FSA Data Security Guidelines, COBIT, Data Protection Act, 3rd party due diligence, Identity and Access Management, log management and SIEM.• Information Security Manager for major public sector firm advising business on various projects.• Worked with CISO, Programme Manager and various business units to remediate issues in order to achieve PCI-DSS compliance.• Assessed the PCI programme by performing a gap analysis against the PCI Data Security Standard.• Re-scoped the PCI programme in order to address key areas not identified in the original programme• Mitigated issues to prepare firm for final PCI DSS assessment• Managed project to address vulnerabilities on the firm’s e-commerce web portals.• Managed engagement with penetration testing firms to verify issues on portals were mitigated.• Decommissioned services that were not PCI compliant.• Reviewed and mitigated access to network and web infrastructure.• Project managed the implementation of Symantec Endpoint Encryption and Symantec Endpoint Protection to 27,000 desktops.• Managed various information security projects including implementation of log management solution, 2 Factor Authentication and migration of Enterprise Certificate Authority.• Created Information Security Advisory site automating the Project Delivery Framework Security Questionnaire.• Expanded the Forensic Investigations function throughout the firm.

New York, Ny, Us

• Managed and Trained new regional ITRFD team which coordinates all eDiscovery (process in which electronic data is sought, located, secured, and searched with the intent of using it as evidence) and Forensic Investigations for the Europe, Middle East and Asia region.• Created and Presented awareness campaign to enhance visibility and awareness of team amongst Legal, Compliance, HR, Audit and Security.• Documented ITRFD processes specific to EMEA region.• Managed Gap Analysis and Process Review project to find gaps in ITRFD process, resolve issues, enhance stakeholder relationships and move ITRFD from an operational to strategic role.• Coordinated with Global ITRFD management the implementation of a self service website for our stakeholders.• Tripled requests coming into ITRFD EMEA over the past year compared to total year 2007 requests for data.

New York, Ny, Us

Engineering and Deployment of Web Services such as WebSphere, IIS, .NET Web Services, SharePoint Portal, WebTrends, etc.

• Supervised network of approximately 100 users and 40 clients in a multi platform Netware/NT/UNIX environment.• Purchased, assembled and maintained hardware and software for users.• Coordinated projects with consultants to upgrade network infrastructure.• Migrated Novell network to Windows NT.• Performed Level III help Desk support.• Configured desktop/laptop PC based systems.• Configured and maintained Cisco routers at site.• Installed and maintained MS Exchange Server for internal and external email• Installed and maintained several SNA Servers for financial connections to mainframe applications such as ADP, DTC, DBC and Loanet.• Administered Checkpoint firewall.• Configured and maintained SWIFT messaging system.• Installed and configured web server for intranet use.• Trained users on hardware/software functionality.

Managed, motivated and instructed staff in a million dollar retail Hardware/software sales environment.

M.Sc., Internet Technology

B.Sc., Professional Computer Studies

Computer Science

Computer Engineering