Nate S. Hartman Email & Phone Number

San Francisco, Ca, Us

Direct Consulting for Agile Cybersecurity Risk Quantification. Cloud Security Compliance. Enterprise Risk Management. Security risk Assessments. Compliance Risk Management Strategy and Program Design. Information Security Compliance and Data Privacy Readiness. Technical Remediation Planning and Execution. Helping Companies Achieve Easy Audit Success.

San Jose, California, Us

Cybersecurity Risk, Global Security Office: Reporting to the CSO of Symantec Corporation. Partnering with the business to drive information security governance across the organization.

San Jose, California, Us

Created and lead the PCI Security Program at Symantec. Reporting to the VP, Chief Audit Executive responsible for building and maintaining a global security program to ensure Symantec Corporation is compliant with the PCI DSS. The team is responsible for implementing and maintaining an enterprise-wide risk and compliance strategy to secure Symantec’s information assets, services, and the products that depend on them, building trust with customers and stakeholders, and protecting the privacy of Symantec’s customers and employees. Responsibilities are leading the Global PCI Security Compliance Program, ensuring all Symantec Corporation business units assess, maintain, and report on PCI compliance. Advise Symantec on PCI DSS, scope, remediation strategy, and guidance on requirements. Develop and refine PCI compliance assessment and management processes and work streams for annual assessment, remediation, and reporting. Provide PCI implementation guidance and support to Symantec Corporation’s business units in scope, including conducting PCI DSS compliance assessments, ROC reporting, architect and implement compensating controls where appropriate. Develop a PCI program to support Symantec Corporation’s business-as-usual approach to security.

San Jose, California, Us

Security and Information Risk Management, Information System Auditing and IT Risk Assessment * Assessing systems, identifying threats and vulnerabilities, analyzing results and recognizing patterns. Drafting formal risk assessment reports * Analyze, prioritize and evaluate data and recognize patterns relevant to information risk management * Lead information information security systems auditing programs * Identify and articulate successful risk mitigation strategies and controls * Communication skills and translate technical explanations into business language * Written communication, drafting professional risk assessment reports which explain security risks in a meaningful way, to enable business decision making * Interpersonal skills with a proven ability to speak comfortably and knowledgeably with various stakeholders, including executives, business owners, and technical experts * Assertive and self-driven individual who can ensure tasks are followed through until completion * Detail and motivation to deliver exceptional quality * Knowledge of industry standards, ISO 27001, ISO 31000, NIST SP 800-30, NIST SP 800-115 * Expert level knowledge and experience with PCI DSS assessments and compliance life cycle * PCI Internal Security Assessor (ISA) for Symantec Corporation.

San Francisco, Ca, Us

http://www.isc2-sf-chapter.org

Overland Park, Ks, Us

Perform PCI DSS security compliance assessments as QSA for Fortune companies. Acting on behalf of the client as an advocate and strategist for PCI security compliance. Performed all audit and reporting functions. Provided security control remediation and assurance.

Developer of the “preemptive forensics” network appliance (continuous-loop packet capture, sniffer, and analyzer.), Supported a diverse clientèle. Penetration Testing, Security Assessment, Compliance Audit preparation and remediation. With clients including Brownson, Rehmus and Foxworth, Inc. - Menlo Park, Ca where responsibilities included: Network security analysis and consulting. Data forensics, security incident and event monitoring, data recovery, cloud migration, DNS management. Preform penetration testing. Conduct Security Assessments, remediation treatment plan and reporting.

Dallas, Tx, Us

Reporting to the CEO. Responsible for all information systems and security for the company. Collaborated with teams to ensure efficient operation to maximize ERP ROI. Developed security training program. Reduced costs by 40% by implementing new systems and process. Implemented IPSec WAN, saving more than $216,000 over a 36 month period. Operations management included: network services, switches, routers, load balancers, firewalls, NIS/SAN, Oracle EBS R12, Email, Web, AD and endpoint OS. Constructed network and core business systems with 'zero downtime' from its implementation in 2003 through my departure in 2011. Designed, implemented, and maintained a highly secure hybrid network. Utilized Open Source to save costs. Established security policies consistent to industry standards. Conceptualized and designed a high-availability data center with 5-9s uptime at a cost savings of 30%. Developed custom software to automatically backup and restore prioritized data at specific time slice at a cost savings of $50,000. Implementation of ORACLE EBS R12 ERP and saved over $2 Million dollars.

WEB DEVELOPER & DESIGNER 09/95 to 09/08. President and CEO of Commercial Zen, Inc., Novato, CA. The company designs, develops and hosts web sites and web applications. Clients include American Express, Visa corp., SBC and onters. Commercial Zen, Inc. is a full-service IT firm that specializes in developing secure networks and software applications for its SMB and Fortune clients. The company was founded in 1995 in Fairfax, CA - by Nate Hartman - http://www.comzen.com

Music Theory And Composition

Highest Award, Human Relations And Public Speaking

Associate Of Arts - Aa, Music Theory, General Education Units