Ricardo Bonefont Email & Phone Number

San Diego , Ca, Us

San Diego, Ca, Us

Provided leadership for the Security Operation Center as a trusted partner to protect its customers, advisors, and clients. Responsible for the overall security operations program for detecting, analyzing, and responding to cyber security threats using technologies like Proofpoint for email gateway security, CrowdStrike for Endpoint Detection and Response (EDR), Symantec for data loss prevention, and awareness through Cybersecurity Intelligence Today Newsletters.Key Achievements:• Established a well-organized Security Operations Team• Created enriched metrics that helped transform the SOC maturity state by identifying gaps, highlighting bottleneck indicators, and detecting policies/rules that generate high volumes.• Consistently achieved 100% on OLA and SLA for detecting (Dwell Time), triaging (Mean-Time-To-Analyze), and remediation (Mean-Time-To-Resolve).• Improved team effectiveness and performance with constant process development, including periodic reviews/audits of operational playbooks, processes, and system policies/rules.• Established prevention of cybersecurity incidents through proactive such as continuous threat analysis, countermeasure deployment and coordination, security consulting, and awareness• Improved automation leveraging technologies with advanced analytics, machine learning with real-time threat sources, and orchestration to automate incident responses

Fort Mill, South Carolina, Us

Oversee the Security Operations program including endpoint security with endpoint detection and response (EDS), firewall management and monitoring, security incident and event management (SIEM) monitoring and alerting, vulnerability management and reporting, incident management and forensic investigations, attack and pen-testing assessment, security procedures and policy management, and identity and access management (IAM). Key Achievements:  * Implementation of Okta and Saviynt IAM solutions for 10,000 employees – Active project 2019 * Implementation of CrowdStrike Falcon, a next-gen endpoint protection system with endpoint detection and response (EDR) procedures for incident response and investigations * Managed the security department budget and annual budget planning cycle * Work with and influence project teams and business contacts regarding security controls, risk mitigation techniques related to information security * Managed the vulnerability management program and remediation efforts * Managed the incident response program; created policies, operating procedures, and incident tracking forms * Develop dashboards and metrics related to security threats, risk, and operations, including third-party services * Implement programs and standard operating procedures to protect employees and create safe and compliant work environments * Managed offshore Level2 & Level3 Cyber Security support, teams

Miami, Fl, Us

Provide leadership for the information security and compliance team, which safeguards Ryder’s assets such as its intellectual property, computer assets, networks, and employees. Work with cross-functional teams to prioritize initiatives, investments, and projects that mitigate overall risks, strengthen security defenses and reduce security vulnerabilities across all relevant Ryder systems.Key Achievements:• Develop best in class policies and procedures related to all fundamental processes which support user access, authentication,• credential management, software development, change management, and incident response.• Manage day-to-day information security operations, policies, architecture, compliance, and governance• Manage security incidents and events to protect corporate IT assets, including intellectual property, regulated data, and the company's reputation• Provide regular reports on the current state of the information security program to the enterprise risk team, senior business leaders, and the board of directors as part of a strategic enterprise risk management program• Provide expert advice to various business groups and leaders on SOX and PCI regulatory compliance• Managed a $2.1 million budget dedicated to Ryder’s staff, products, and services.• Managed Ryder's Cyber Security Awareness Training program for all employees, including monthly new hire orientation presentations

Fort Lauderdale, Fl, Us

Provide leadership in Compliance Strategy and Compliance execution in supporting governance processes, deployment, and improvement initiatives. Create strategy and procedures related to all areas of Governance, Risk Management, and Compliance. Also, coordinate the efforts of several groups to ensure compliance with SOX and PCI regulations and requirements.Key Achievements:• Provide strong central oversight to deliver consistency and quality in compliance work across the organization• Communicate governance and compliance objectives to ensure appropriate compliance and risk-aware culture.• Evaluate general and specific training needs and perform such to support the control environment and associated control framework• Interact with various business groups to understand how they use IT systems and be compliant in areas of SOX and PCI regulations.• Oversee the team(s) that performs IT General Computer Controls (GCC) testing and ensure the quality of testing results moreover, working paper documentation.• Identify gaps in the design and operating effectiveness of controls, and identify opportunities for more efficient and effective controls.• Lead the innovation and continuous improvement of internal control framework, including the integration of multiple compliance requirements.• Work with other IT managers, Internal Audit and External Audit to develop constant monitoring and technology-enabledaudit techniques.

Fort Lauderdale, Fl, Us

As the lead senior security analyst, my responsibilities included the overall IT security for Citrix global, which consisted of assessing or identifying security risks, evaluating the risks, and proposing solutions that would remedy such risks.Key Achievements:• Defined and revamped the Information Security Policy.• Implemented a centralized log management global solution using the LogLogic product.• Implemented Symantec Security Information Manager 4.5 for security alerts correlating and generating security incidents.• Implemented the Symantec Critical System Protection application for providing a host intrusion prevention system (HIPS) solution on critical core systems.• Implemented the McAfee FoundStone vulnerability assessment product to perform a global assessment of missing OS and application patches.• Achieved SOX/COBIT compliance from audit finding performed by 3rd party auditing firms.• Raised user-end security awareness through new hire programs and presentations.• Provided in-depth technical advice for investigations of information security incidents including internal frauds, hacker break-ins, and system outages.

Peachtree Corners, Georgia, Us

Broadspire Services, Inc. (formerly known as Kemper National Services, Inc.)Oversee activities and manage the work of eight IT Security employees engaged in developing, maintaining, and modifying application or infrastructure systems. This team consisted of security administrators, security analysts, and disaster recovery coordinators from both the local branch office in South Florida and the headquarters in Chicago, Illinois. Reduced cost of about 23% (~$300,000) of Disaster Recovery expenses by implementing pre-loads system builds to all critical servers; increasing recovery time by about 72% (reducing the total recovery time to about 30 hours).Key Achievements:• Worked closely with decision makers in other departments to identify, recommend, develop, implement, and support cost-effective technology solutions for all aspects of the organization.• Created a security department and acquired resources• Revised Information Security policies for the organization.• Develop Business Continuity Plans for our business partners and coordinate and execute DRP test for the organization.• Complied with all SAS70 standards and procedures relating to program quality, security, infrastructure stability and documentation.• Implemented and maintained an end-user Information Security awareness campaign.

Peachtree Corners, Georgia, Us

Responsible for creating company security policies and procedures, creating end-user awareness presentations to provide employee security tips and guidance, manage security administration, assessments, and controls for the Windows and UNIX systems, and respond to internal audit issues, manage network security using open source intrusion detection applications and operating systems.Key Achievements:• Established an IT Security team with clear SOPs and responsibilities.• Managed overall security for the entire company including security requirements for pre-production applications andsystems.• Established SLA requirements for customers and accomplish customer satisfaction.• Comply with successful audits by creating “self-audit” processes and procedures periodically.• Established a Security Incident Response Team (SIRT) for emergency security controls and countermeasures.

New York, New York, Us

Built and installed a secure NT 4.0 domain environment using the use of a Primary and Backup Domain Controller, fax server, standalone servers, and workstations. Other responsibilities after the domain was built were to secure the domain by controlling the ACLs for tightly secured areas and sensitive information. Developed PERL program along with advance DOS scripting in order to automate the extraction of NT Security Event logs from multiple servers and produce audits and violation reports on a daily basis. Performed check-and-balance internal audits for every account administration created. As part of an entitlement process for User IDS, I assisted with semi-annual account review and audits for Mainframe, Windows, and UNIX platforms.

Masters, Information Technology With A Concentration In Internet Security

Bachelor, Information Technology

Bachelor, Computer Information Systems

Bachelor, Computer & Technology