Nicholas Feistel Email & Phone Number

- Conducts audits of client information security programs based on frameworks and regulations, including NIST 800-171, NIST CSF, HIPAA, and AWIA to assess the implementation of controls and requirements.- Led internal initiative for SOC 2 Type 2 audit, including control design, implementation, coordination with audit firm, and use of provided compliance platform to monitor controls and submit evidence.- Leads internal security risk management, including performance of risk assessments and quarterly risk committee meetings.- Presents tailored risk assessment findings to senior management by translating identified risks into quantifiable financial impacts to the organization.- Cross-department collaboration to develop effective solutions for remediating vulnerabilities, closing gaps, and mitigating risks in client environments.- Develops and revises information security policies, plans, and procedures, including incident response, security awareness, and password management.- Leads internal audits to ensure compliance with security policies and facilitates corrective action for identified vulnerabilities, risks, and gaps.- Crafted and delivered speech on the Gramm-Leach-Bliley Act Safeguards Rule at 2023 annual TXCPA tax conference.- Collaborates with senior management on business development opportunities relating to IT, information security, and compliance.- Hands-on experience in research, design, approval, implementation, and maintenance of security controls.- Develops and delivers training presentations to employees about cybersecurity and compliance topics, including incident response, password management, and compliance regulations.- Provides general consulting to internal senior management and to clients about cybersecurity best practices, compliance requirements, policy development, and filling out questionnaires requested by partners and vendors.

- Enforced security and compliance policies to ensure system and information integrity.- Performed user account creation in Active Directory, M365, and many other services and applications.- Performed troubleshooting, maintenance, and configuration of computer systems for 100 clients.

Bachelor Of Arts - Ba, Political Science & Speech Communication

Communication And Media Studies