Paco Diaz Email & Phone Number

Olathe, Ks (Headquartered In Chicago, Il)

Manager for the Information Security Management SystemDesigned and oversaw security governance activities.Ran all internal IT audit activities.Conducted all information security risk management activities.Managed external audit correspondence, preparation and visits.Directed all enterprise continuity and recovery planning and testing.Consulted management on physical and environmental security controls.Oversight and management of security awareness training and… Show more Manager for the Information Security Management SystemDesigned and oversaw security governance activities.Ran all internal IT audit activities.Conducted all information security risk management activities.Managed external audit correspondence, preparation and visits.Directed all enterprise continuity and recovery planning and testing.Consulted management on physical and environmental security controls.Oversight and management of security awareness training and communications.Coordinated and executed significant projects: - Enterprise COVID response and management. - Enhanced privacy controls and compliance. - Enhanced software usage tracking and reporting tools and procedures. Show less

Coordinated audit visits.Conducted control self-assessments.Oversaw service continuity plan development and testing.Developed and deployed information security risk assessments.Oversaw the development and deployment of vulnerability assessment and remediation program.Coordinated the revision and total redevelopment of information security policy.Coordinated the development of an enhanced change management process.

Kansas City, Missouri Area

Supported BKD’s IT Risk Services division on SOC Type I and II Reports. - Worked with clients on descriptions and refinement of system controls. - Tested supporting documentation for effectiveness (Type II Report) of controls.Supported company financial auditors in IT assurance engagements. - Worked with clients and auditors on the testing of IT general controls. - Provided clients and auditors findings and recommendations on IT general control effectiveness and… Show more Supported BKD’s IT Risk Services division on SOC Type I and II Reports. - Worked with clients on descriptions and refinement of system controls. - Tested supporting documentation for effectiveness (Type II Report) of controls.Supported company financial auditors in IT assurance engagements. - Worked with clients and auditors on the testing of IT general controls. - Provided clients and auditors findings and recommendations on IT general control effectiveness and improvement.Performed IT risk management consulting to provide clients a risk analysis and subsequent risk management process refinement.Supported prospecting and sales work. - Developed a battery of IT security risk assessment products for consulting work. - Contributed to or lead IT security risk assessment consulting proposals. - Presented internally and externally on IT risk management consulting services including Association of College & University Auditors (ACUA) and Central Association of College and University Business Officers (CACUBO) conferences. Show less

Tuscaloosa, Alabama Area

Work with IT security management to advance current IT compliance and risk management processes. - Work towards formalization of baseline information security controls (NIST). - Work the development of a comprehensive risk assessment strategy.Work to develop relationships within the research community to serve as a liaison between university research efforts and Office of IT services. - Work as the Office of IT liaison for research data governance committee. - Work as… Show more Work with IT security management to advance current IT compliance and risk management processes. - Work towards formalization of baseline information security controls (NIST). - Work the development of a comprehensive risk assessment strategy.Work to develop relationships within the research community to serve as a liaison between university research efforts and Office of IT services. - Work as the Office of IT liaison for research data governance committee. - Work as the Office of IT liaison for Internet2®; the member-owned high-speed network infrastructure.Work to develop relationships within Alabama to assist the Office in establishing a presence in Alabama telehealth initiatives.Work with the University information security officer to develop/enhance IT policy. Show less

Developed formal university-wide IT compliance program. - Decreased weekly average of outstanding system security vulnerabilities by 94% after the first year. - Facilitated the remediation of 105 web applications with vulnerabilities. - Facilitated the removal of 33 unused/unmonitored web applications.Management of IT GRC solution. - Coordinated the selection and procurement of the solution. - Implemented and executed risk assessment.Trained extensively on… Show more Developed formal university-wide IT compliance program. - Decreased weekly average of outstanding system security vulnerabilities by 94% after the first year. - Facilitated the remediation of 105 web applications with vulnerabilities. - Facilitated the removal of 33 unused/unmonitored web applications.Management of IT GRC solution. - Coordinated the selection and procurement of the solution. - Implemented and executed risk assessment.Trained extensively on university compliance program and general IT security practices.Provided data governance reviews and consultation with over 100 TTU departments on personally identifiable information security resulting in increased awareness and individual departmental action to increase security.Participated on the IT Security Team; responsible for the policy creation and strategy.Directed miscellaneous projects for the TTU Office of the Chief Information Officer. Show less

Kansas City, Mo

Developed an Information Security Program for data governance, risk, and compliance including: - Vendor Management Program - Information Security Awareness & Training - Incident Response Planning - Policy development and communication - Records Management Program development - Information Security Risk AssessmentsCoordinated IT preparation for audits, regulatory reviews and remediation.Managed disaster recovery and business continuity plan (BCP). -… Show more Developed an Information Security Program for data governance, risk, and compliance including: - Vendor Management Program - Information Security Awareness & Training - Incident Response Planning - Policy development and communication - Records Management Program development - Information Security Risk AssessmentsCoordinated IT preparation for audits, regulatory reviews and remediation.Managed disaster recovery and business continuity plan (BCP). - Coordinated the procurement of a BCP management solution. - Directed the creation of the BCP. - Directed the testing of the BCP.Provided presentations and briefings to senior management and directors on program effectiveness. Show less

Overland Park, Ks

Oversaw technology budget for the Kansas region.Coordinated critical IT projects for bank conversions, location openings, and renovations.Effectively trained associates on technology solutions.Managed loan documentation software.Coordinated problem solutions with vendors and associates.Developed manuals and provided support for customer-based technology.Developed strategies for significant technology conversions and upgrades.Kansas region coverage included seven… Show more Oversaw technology budget for the Kansas region.Coordinated critical IT projects for bank conversions, location openings, and renovations.Effectively trained associates on technology solutions.Managed loan documentation software.Coordinated problem solutions with vendors and associates.Developed manuals and provided support for customer-based technology.Developed strategies for significant technology conversions and upgrades.Kansas region coverage included seven banking locations. Show less