Scott Dingman Email & Phone Number

Greenwood Village, Co, Us

In addition to my leadership role in the Assessments practice delivery area, providing PCI DSS 4.0 compliance reports and leading PCI assessments, I also provide to the practice:Training, mentoring and thought leadership within my areas of expertise. Provide support to the practice by mentoring Coalfire's Associate QSAs.Support practice with scoping and sales support.Act as leadership chosen champion to support both delivery and cross practice initiatives.I interact with peers and clients as both an auditor and assessor, depending on the engagement. I audit information systems to ensure the integrity and effectiveness of security measures. I test technical controls, policies and procedures, laws, regulations, and industry best practices.

Greenwood Village, Co, Us

I interacted with peers and clients as both an auditor and assessor, depending on the engagement. I audited information systems to ensure the integrity and effectiveness of security measures. I tested technical controls, policies and procedures, laws, regulations, and industry best practices.

Basking Ridge, Nj, Us

I was responsible for leading, managing and delivering PCI Assessment and Strategic consulting on a variety of PCI client engagements (primarily) in North America.I was responsible for the following:• Delivering and leading complex security consulting engagements.• PCI Level-1 Assessments.• SWIFT CSCF Assessments.• Supporting levels 2 and 3 merchants with SAQ documentation.• PCI Remediation Consulting.• Report writing (ROC, Gap Analysis, Playbooks, Policies, Letters of Opinion).• Technical evidence, configuration and policy review.• Providing mentoring to junior consultants.• Developing and presenting Executive presentations and deliverables related to PCI projects.

Alpharetta, Ga, Us

I was responsible for managing the delivery of PCI DSS compliance services (e.g. Report on Compliance, Gap Analysis, Advisory, QSA Signed SAQ) in North America.I coordinated and scheduled security engagements for team members, monitored the status of those engagements, provided quality assurance for deliverables and manage client relationships. I also worked closely with the Vice President of Security Consulting Services and was responsible for ensuring that ControlScan delivery standards were upheld, and services were delivered in accordance with the Statement of Work. I was also responsible for working with the project management system, monitoring the status of resource utilization, project budgets and financials.I had direct operational oversight of the PCI-QSA Team within RCM.I reported to the Vice President of Security Consulting Services.

Alpharetta, Ga, Us

I was responsible for the delivery of security-related professional services by ControlScan. My focus is on client-facing delivery of various security regulatory and best practice consulting engagements, including PCI DSS Assessments, HIPAA/HITECH Assessments, IT Risk Assessments, and others. I worked independently to manage projects from initial planning and kick-off through the project’s conclusion, as well as contribute to up-front processes including sales and relationship-building. I delivered high-quality assessment engagements as an individual and as part of a team. I maintained and enhanced quality relationships with clients and prospects. I contributed to the evolution of ControlScan service offerings including scoping processes, delivery steps, deliverable format and content, etc., to ensure quality and consistency. I contribute to development of new, additional service offerings. I was promoted to manage this team in March 2018.

Chicago, Illinois, Us

As a Supervisor in McGladrey LLP’s (now RSM) Security and Privacy Services Group within the Technology Risk Advisory line of business, I focused primarily on leading Payment Card Industry (PCI) Data Security Standard assessments in the West Region. I also worked independently and as part of a team to lead teams in the performance of security assessments, including internal vulnerability assessments, internal penetration testing, wireless security assessments, social engineering, ISO27000 assessments, Payment Card Industry (PCI) assessments, Federal Information Security Management Act (FISMA) assessments and Health Insurance Portability and Accountability Act (HIPAA) assessments.

Nashville, Tennessee, Us

I performed information security audits and assessments for KirkpatrickPrice customers. I prepared documentation and report findings for clients as well as participated in pre-sales efforts and client relationship management. My domains included: PCI, SSAE 16, EI3PA, HIPAA, EU Safe Harbor, CSAE 3416, Risk Assessment and ISO 27001/2 as well as a variety of cybersecurity and IT advisory services. I also supported secondary ethical hacking activities and pentesting through our sister company Raveneye.

Fort Lauderdale, Fl, Us

In this consulting role, I was responsible for all aspects of the development and implementation of assigned projects and provided a single point of contact for those projects. I had taken projects from original concept through final implementation. I interfaced with all areas affected by the project including end users, computer services and client services. I defined system’s scope and project’s objectives. I developed detailed work plans, schedules, project estimates, resourcing plans and status reports. I conducted project meetings and was responsible for project tracking and analysis. I ensured adherence to quality standards and reviewed project deliverables. I managed the integration of vendor tasks and tracked and reviewed vendor deliverables. I provided technical and analytical guidance to project teams. I recommended and had taken action to direct the analysis and solutions of problems. I left this position due to direct hire with the client company.

Fort Lauderdale, Fl, Us

I worked with Program Management and Stakeholders to identify the scope and dependencies within their projects and across the PCI Program. I created and managed project plans, budgets, and delivery timeframes. When appropriate, I took corrective action to insure achievement of project goals. I was accountable for the successful implementation of selected PCI projects within the broader PCI Program (i.e. on time, on budget, and with high levels of stakeholder satisfaction.) I managed relationships with key stakeholders, addressing issues and concerns and escalating to the appropriate Management as necessary. I served as an escalation point for project related issues, risks. I worked closely with other Project & Program Managers to ensure seamless integration and delivery across multiple domestic locations. I established and maintained strong communication with executive management at both Corillian and as well as other Fiserv sites through consistent status reporting, meetings (informal and formal) and presentations as required. I oversaw assigned staff and contractors, set performance objectives and defined project milestones, dependencies, and deliverables. I managed server third party relationships involved in the overall program which included scheduling activities, maintaining budget control, and insuring deliverables were properly defined and completed on schedule. I ensured project / program reporting was updated with forecasts and actual time for all assigned projects and tasks. I utilized my solid understanding of Rational Unified Process framework, Agile as well as Waterfall SDLC methodologies.

New York, Ny - New York, Us

I provided Project Management expertise, systems design, development planning, online training authoring and development, project documentation, communications management, business systems analysis and project team leadership for two project for the Oregon Department of Transportation's Technology Management Section.My core project was managing the replacement of a critical infrastructure server that was causing PCI compliance issues for the state, yet had eluded implementation for almost 10 years by three previous PMs. Six months, and done.

I drove the technology infrastructure selection and build out for this visionary D2C start-up. I also managed implementation of the ecommerce website (Linux, Apache, Zen Cart, MySQL), overseeing contract / vendor selection and management, all aspects of technical production, rendering and editing services. In addition I developed technical training for technical staff and sub-contractors. As part of my agreement, once complete, I outsourced my responsibilities.

Various Technical PM roles (contract) 11-2007 - 04/2009Intel Corporation - Senior Strategic Software Planner 12/2005 - 12/2006Mentor Graphics Corporation - Global Support Council Chair / IT (UNIX / Linux) Engineering Support Manager - 02/2001 - 11/2005 M2Networx - Vice President of Information Technology - 04/1999 - 12/2000I-MARK / ASM - CIO - 03/1998 - 04/1999Acres Gaming Corporation (now IGT) - Information System Manager - 1998 - 1999ACS - VP of IT 1997 - 1998Synergistic Software (now xpertonline.net) - Helpdesk Manager - 1996 - 1997

Washington State Police Commission, Police Science

Associate'S Degree, Law Enforcement Investigation And Interviewing