Richard K. Hare Email & Phone Number

Costa Mesa, California, Us

Successfully worked with each client to develop/implement/maintain a sustainable Cybersecurity program. Provided vCISO services (including NIST CSF assessment, Risk assessment, Security Policies and Standards, development, BCDR and Incident Management testing) to support client's cybersecurity compliance/maturity.Performed GLBA security, and NIST CSF with CER CSA assessments resulting in risk gap identifications and remediation/mitigation recommendations for security enhancement.

Bangalore, Karnataka, In

Designed and delivered process to address the California Consumer Privacy Act (CCPA) for retail client by identifying Lines of Business (LOBs), and applications within each that contain consumer Personal Privacy Information (PII). Also documented the data flow of PII within applications and subsequently within LOBs; and configured/integrated BigID with client ERP/IT environment. Managed customer collection of regulatory security control compliance evidence in required format, by reporting progress metrics to ensure timely completion and resolve business unit collection issues in person.Completed Security Control Maturity Review and Report including recommended control gap remediation/mitigation road map prioritized to meet client's business needs. As ITAR SME, addressed all ITAR issues both internal / client, and provided a phased approach for client to meet ITAR cyber security controls. Supported ITRO function by managing Risk Register, IT Incident Response, JSOX External Audit tracker, cross-security control framework mapping tool, and special tasks to immediately address customer security risk requests. Created automated Risk Register reporting dashboard, JSOX Progress reporting dashboard, Communication tool for control of client Security Management meeting requirements,Managed a parallel ITRO function for different client including an automated Onboard/Offboard tracker.

-Lead of Event Management Committee-Lead of Communications Committee.-Former Vice President, Secretary and Member-at-Large

An IT Audit, Information Security, Information Risk Management Consultant, with core competencies in Security Controls, Cloud Security Governance, Risk Assessment, Risk Processes, IT Audit Planning/ Execution/ Reporting, Control Gap Remediation, GRC, SOX IT, NIST, Security Management, Database Security (Oracle, SQL Server, Sybase), Access Role Management, Physical Controls, Business Continuity Disaster Recovery planning, IT Vendor Relationship, and ISO 2700x.Clients included but were not limited to: Baker Hughes, Captavi, Chevron, City of Houston, Cornell Companies, EP Energy, Hess Corporation, Horizon Wind Energy, ING, KBR, Marathon Oil, Quanta Services, Shell Corporation, Shell Trading, Southside Bank.

Milwaukee, Wi, Us

Technical consultant, proficient in SOX, SAP Basis/Security, Audit Planning, Business Continuity/Disaster Recovery, Security Risk Assessment, Security Pen Test, Security Network Analysis, and Policies & Procedures.-Performed local and out-of-state engagements/audits for Fortune 500 and Global 1000 companies inclusive of but not limited to: Bunge North America, CITGO, Honeywell, Landry’s, Miller Brewing.-Supported client’s security function including baseline review, policies and procedure development, administration, network security maintenance, server configuration, problem resolution, vulnerability assessment, and recommendations.-Provided clear/concise communication, audit planning/resource allocation, and organized documentation to clients (i.e. process flow diagrams, gap analysis, project plan, etc.).-Developed test scripts, tested IS General/Application Controls, and recommended gap mitigation periodically to satisfy clients’ PCI, regulatory, HIPAA, CobiT, or SOX requirements as part of the Internal Audit group.-Exhibited deep understanding of clients’ business, financial and technological processes during audit/reviews.-Created Billing Application User Manual and Billing Application System Manual (SQL Server) to satisfy client control requirements. Documented manuals for future user training.-Provided 100% baseline improvement of Oracle audit plan for major global agribusiness.

Houston, Texas, Us

Exceeded client expectation through early completion of documentation prior to external audit which integrated test results into their findings.

Houston, Texas, Us

Defined necessary goals and efforts for Disaster Recovery (DR) strategy. Performed activities to support that strategy. (Including but not limited to: Plan development, coordination of team activities that resulted in successful annual DR test.)-Managed process documentation development project of security administration functions and SLAs.-Developed role based single login process improvement for administration of IT access control.-Standardized companywide classification of logical and physical information records. Created rules for record management implementation according to classification and type of record.PRIOR EXPERIENCE ExxonMobil - SR. Security & Controls Specialist - contractOmitron Inc./GTE Technology Org. - Security Engineer - NASA CSOC contractPG&E Energy Trading - Sr IT Data Security SpecialistEquistar - Sr IS Security SpecialistShell Services - Sr IS Security SpecialistUnisys - System Engineer - NASA contractsMITRE - Member of Technical Staff (Security) - NASA JSCTexaco - Sr Security AnalystGlobal Marine - Sr. Security & QA AnalystHL&P - Security Analyst

Bachelors, Computer Systems

Technological Social Research