Paco Diaz Email & Phone Number

Olathe, KS (Headquartered In Chicago, IL)

Manager for the Information Security Management SystemDesigned and oversaw security governance activities.Ran all internal IT audit activities.Conducted all information security risk management activities.Managed external audit correspondence, preparation and visits.Directed all enterprise continuity and recovery planning and testing.Consulted management.

Coordinated audit visits.Conducted control self-assessments.Oversaw service continuity plan development and testing.Developed and deployed information security risk assessments.Oversaw the development and deployment of vulnerability assessment and remediation program.Coordinated the revision and total redevelopment of information security.

Kansas City, Missouri Area

Supported BKD’s IT Risk Services division on SOC Type I and II Reports. - Worked with clients on descriptions and refinement of system controls. - Tested supporting documentation for effectiveness (Type II Report) of controls.Supported company financial auditors in IT assurance engagements. - Worked with clients and auditors on the testing of IT general.

Tuscaloosa, Alabama Area

Work with IT security management to advance current IT compliance and risk management processes. - Work towards formalization of baseline information security controls (NIST). - Work the development of a comprehensive risk assessment strategy.Work to develop relationships within the research community to serve as a liaison between university research.

Developed formal university-wide IT compliance program. - Decreased weekly average of outstanding system security vulnerabilities by 94% after the first year. - Facilitated the remediation of 105 web applications with vulnerabilities. - Facilitated the removal of 33 unused/unmonitored web applications.Management of IT GRC solution. - Coordinated the.

Kansas City, MO

Developed an Information Security Program for data governance, risk, and compliance including: - Vendor Management Program - Information Security Awareness & Training - Incident Response Planning - Policy development and communication - Records Management Program development - Information Security Risk AssessmentsCoordinated IT preparation for audits.

Overland Park, KS

Oversaw technology budget for the Kansas region.Coordinated critical IT projects for bank conversions, location openings, and renovations.Effectively trained associates on technology solutions.Managed loan documentation software.Coordinated problem solutions with vendors and associates.Developed manuals and provided support for customer-based.