Ori Rotem Email & Phone Number

Paramus, New Jersey, Us

Plano, Texas, Us

Building and developing the Information Security Risk Management Program, which involves assimilating the ServiceNow GRC tool, designing an effective GRC strategy and risk metrics to support and integrate with FI ERM and business processes, and implementing continuous monitoring and automation to ensure quick and accurate regulatory identification and risk responses. Conducting security risk assessments for various technologies, following cybersecurity frameworks such as NIST CSF, ISO 27001, and various regulations such as HIPAA and GDPR, to identify security gaps and provide recommendations for remediation plans.

Dallas, Texas, Us

Responsible for enterprise security risk management, including vendor risk management using ServiceNow GRC tool, following NIST CSF, CIS controls, PCI, and HIPAA regulations.Leading a team of six analysts who conduct security risk assessments for third parties and assess the overall enterprise Information security risks.Conducting security assessments for various technologies including SaaS solutions, medical devices, and hardware. Identifying and evaluating security gaps and providing recommendations for remediation plans.Developed and designed the global Information Security enterprise and 3rd Party Risk Management Program. Collaborating globally with business partners to ensure risk mitigation is being followed, meeting policy and compliance requirements. Establishing and maintaining key internal and external cross-functional relationships to develop processes, solutions, and opportunities to drive innovation and productivity.

Dallas, Texas, Us

Managed a team of four 3rd Party Security Risk Analysts responsible for managing significant vendor risk management processes to support and enable BSWH business as per policies and compliance requirements.Developed the 3rd Party Security Risk Management (TPRM) program, including due diligence and compliance with laws and regulations. Collaborated with vendor’s management to ensure essential partnership in mitigating cybersecurity risks. Led the negotiation process of information security agreements with 3rd parties and partners. Served as a link between leadership and various stakeholders by, communicating decisions and helping to resolve work related matters.

Ramat Ha'Sharon, Israel, Il

Provided consultation for security risk management in information and physical security. Implemented procedures and security controls following global standards and best practices.Identified possible security threats and determining the best security measures.Implemented and maintained security policies, plans, and procedures to cover all possible security threats.Conducted risk assessments to identify and reduce risks.

Ramat Ha'Sharon, Israel, Il

Upheld responsibility for risk and compliance of information and physical security.Developed a vendor security risk management program. Worked with all business units to ensure controls are adequate and effective. Set guidance for IT managers to ensure successful implementations of information security controls. Developed standards, guidelines, and processes of various security elements.Supervised and led the organization's Security Incident Response team (SIRT). Developed information security awareness and training programs. Handled information security vendor audits in an effective and efficient manner.

Ramat Ha'Sharon, Israel, Il

Managed security programs and provided information security awareness training to organization personnel.Managed information security audits as well as conducted risk analysis of threats, vulnerabilities, and employee safety. Implemented a risk awareness program to reduce security incidents. Supported/educated business areas on risks and proposed mitigating controls. Assessed third party vendors for adherence to best practices. Verified execution of information security policies and standards.

Ramat Ha'Sharon, Israel, Il

Conducted compensative background checks for employees, candidates and due diligence for vendors, and contractors.Responded to security and safety incidents and completed complex investigations.Provided security profiles and risk assessments for Internal security agencies.