Robert Larocca Email & Phone Number

Palm Beach Gardens, Fl, Us

I am an adjunct professor at CTUO Colorado Technical University Online. I am teaching Management Information Systems courses at the undergraduate and graduate level. It is a rewarding profession as it helps others achieve their goals and continues the learning process for those who want to improve their careers and lifestyle.

Miami, Fl

Managed audit and compliance and controls implementation, monitoring, and remediation. Awesome team here!

Boca Raton, Fl

Position Summary: The Senior Governance, Risk, & Compliance (GRC) Analyst is an integral member of the IT Security & GRC team and is first responsible for delivering a Business Impact Analysis (BIA) as established by IT Leadership and in conjunction, develop and then execute the Business Continuity & Disaster Recovery plans and procedures, so that critical business functions can be resumed within the defined timeframe as required and to minimize loss. This duty works with project teams to… Show more Position Summary: The Senior Governance, Risk, & Compliance (GRC) Analyst is an integral member of the IT Security & GRC team and is first responsible for delivering a Business Impact Analysis (BIA) as established by IT Leadership and in conjunction, develop and then execute the Business Continuity & Disaster Recovery plans and procedures, so that critical business functions can be resumed within the defined timeframe as required and to minimize loss. This duty works with project teams to ensure all projects include requirements for disaster recovery and associated timelines. Show less

Columbia Sc, Raliegh Nc,

Helping clients develop more efficient, effective, and usable information security programs, resulting in increased program visibility, informed choice decision making, speed to compliance, and certification to an international standard. Specializing in ISO27001, PCI and HIPAA compliance. Risk Assessment, and IT Auditing. Have worked on many ISO27001 Certifications at several fortune 500 companies.

Raleigh, North Carolina

My primary responsibility is for achieving and maintaining ISO 27001 certification for Cisco Services. I will also participate in a deep dive audit program for TS including internal audits, customer audits, and vendor audits. I will also lead or participate in other Quality Programs, and help develop the next generation of Quality Programs and Tools for TS. This requires working in a cross-functionality with all groups within TS, vendors, and customers to determine gaps between current… Show more My primary responsibility is for achieving and maintaining ISO 27001 certification for Cisco Services. I will also participate in a deep dive audit program for TS including internal audits, customer audits, and vendor audits. I will also lead or participate in other Quality Programs, and help develop the next generation of Quality Programs and Tools for TS. This requires working in a cross-functionality with all groups within TS, vendors, and customers to determine gaps between current performance and the organizations performance expectations (including organizational processes and external certifications such as ISO 9001, TL 9000, ISO 14000, and others as required.) and drive plans for closure of those gaps. This position has global responsibilities and will require some domestic and international travel. Show less

Currently on a an ISO27001 consulting job in Raleigh North Carolina

Ocala Fl

 Mortgage and Banking Responsible for delivering a resilient, robust and secure and compliant computing environment. Implemented corporate wide Business Continuity planning effort. Achieved corporate buy in, employee awareness and team building. Guided the development of planning policies and procedures. Analyzed requirements for client services application used for monitoring alerts regarding unauthorized access, processing automated email requests/responses, and Active Directory… Show more  Mortgage and Banking Responsible for delivering a resilient, robust and secure and compliant computing environment. Implemented corporate wide Business Continuity planning effort. Achieved corporate buy in, employee awareness and team building. Guided the development of planning policies and procedures. Analyzed requirements for client services application used for monitoring alerts regarding unauthorized access, processing automated email requests/responses, and Active Directory reporting. Produced 2 year roadmap outlining current posture of IT security and how it will be positioned in the next 2-3 years. Prepared detailed security requirements specifications on network security including firewalls, routers and DMZ overview. Performed audits within IT in compliance in NIST – National Institute of Standards and Technology and FISMA – Federal Information Security Management Act. Worked with Deloitte on external audits. Reviewed and recommended physical security requirements for the data center as well as key locations throughout the corporation using biometrics, Fire and Safety requirements as well as OSHA – Occupational Safety and Health Association regulations. Show less

West Palm Beach, Florida Area

This position is responsible for providing Information Technology Security leadership while addressing and managing the development, implementation, and the administration of a range of IT Security processes, policies, procedures, and areas of expertise. The position is responsible for meeting corporate and industry required security guidelines and state laws. This position will require working closely with upper management, department heads, the school board and cross functional teams to… Show more This position is responsible for providing Information Technology Security leadership while addressing and managing the development, implementation, and the administration of a range of IT Security processes, policies, procedures, and areas of expertise. The position is responsible for meeting corporate and industry required security guidelines and state laws. This position will require working closely with upper management, department heads, the school board and cross functional teams to develop security and risk strategies, developing policies and procedures required to meet departmental goals, managing audits and assurance activities, while supervising a team of security specialists. This position will also require the ability to assume leadership role in driving security initiatives that involve organizations outside his/her management responsibilities. Also included is the need to effectively communicate the security program, gain acceptance, being involved in following up on status and working issues that can assist getting to the desirable end state. Show less

Burlington, Nc

This position is responsible for providing Information Technology Security leadership while addressing and managing the development, implementation, and the administration of a range of IT Security processes, policies, procedures, and areas of expertise. The position is responsible for meeting corporate and industry required security guidelines while meeting compliance with a range of regulatory and legal requirements, including SOX, HIPAA, PCI, DIACAP, and state laws. This position will… Show more This position is responsible for providing Information Technology Security leadership while addressing and managing the development, implementation, and the administration of a range of IT Security processes, policies, procedures, and areas of expertise. The position is responsible for meeting corporate and industry required security guidelines while meeting compliance with a range of regulatory and legal requirements, including SOX, HIPAA, PCI, DIACAP, and state laws. This position will require working closely with upper management, department heads, and cross functional teams to develop security and risk strategies, developing policies and procedures required to meet departmental goals, managing audits and assurance activities, while supervising a team of security specialists. This position will also require the ability to assume leadership role in driving security initiatives that involve organizations outside his/her management responsibilities. Also included is the need to effectively communicate the security program, gain acceptance, being involved in following up on status and working issues that can assist getting to the desirable end state. Show less

Financial Information ServicesResponsible for delivering a variety of projects within IT Security as well as the IT Infrastructure. Worked closely with HR, Forensics, Fraud and Auditing. Fostered team work and supported employee career paths.Led team of engineers in server configuration, Active Directory, UNIX Security, voice, routing, data warehousing and telecommunications.Analyzed business requirements and interfaced with vendors for development and enhancement of IT Systems… Show more Financial Information ServicesResponsible for delivering a variety of projects within IT Security as well as the IT Infrastructure. Worked closely with HR, Forensics, Fraud and Auditing. Fostered team work and supported employee career paths.Led team of engineers in server configuration, Active Directory, UNIX Security, voice, routing, data warehousing and telecommunications.Analyzed business requirements and interfaced with vendors for development and enhancement of IT Systems and corporate wide, International, Business Continuity Planning. Began IT Security Department creating Policies and Procedures using the latest compliance issues specifically Sarbanes Oxley, Graham Leach Bliley, FISERV, NIST and FISMA and the OTS. Conducted Internal and external audits with Deloitte and Touche.Traveled to all locations nationally and abroad to review operational posture specifically in Southern California, Connecticut, Kensington England, Bangalore India and Kingston Jamaica.Developed procedures and procured equipment for fail over redundancy using battery/generator back up. This also included remote data mirroring at one on the strategically located sites.Was tasked to head up the building and implementation of a call center in Bangalore India and resided there for 3 months.Made sure all locations adhered to our practices and standards regarding operations, security and telecommunications. Show less

Financial Information ServicesResponsible for managing IT Security and the IT Business continuity planning from the ground up. Worked closely with Internal and External Auditors, (PWC) Vendors, Networking, Telecommunications and Security.Analyzed business requirements and interfaced with vendors for development and enhancement of IT Operating Systems. Negotiated all contracts, leases, and maintenance agreements.Performed audits for compliance with Insurance Regulatory and… Show more Financial Information ServicesResponsible for managing IT Security and the IT Business continuity planning from the ground up. Worked closely with Internal and External Auditors, (PWC) Vendors, Networking, Telecommunications and Security.Analyzed business requirements and interfaced with vendors for development and enhancement of IT Operating Systems. Negotiated all contracts, leases, and maintenance agreements.Performed audits for compliance with Insurance Regulatory and Development Authority (IRDA) including LOMA compliance.Developed Policies and Procedures resulting in SLA agreements for internal department and external entities.Led the corporate disaster recovery effort with Comdisco to implement a corporate approach to Business Continuity Planning. Had CEO support, and conducted a vigorous employee awareness campaign by traveling to all national locations promoting planning. We successfully recovered from Hurricane Andrew in 1992.Was responsible for IBM Mainframe environment RACF, Top Secret as well as the server configuration, support, implementation, change control and maintenance. Show less

ISO27001 Precertification for Cisco Services - Risk assessment and Internal audit of other divisions.

Ensuring that Cisco Services is aligned to be ISO27001 certified. This involves reviewing 114 controls in many security disciplines including physical controls, technological controls, policies, procedures and compliance.

Bs, Ms, Phd (Minus Dissertation), Management Information Systems

Activities and Societies: ISACA, SANS Obtained my BS in professional Business Management, MS in Management of Information Systems.

Associate Of Science, Community Service

Received a degree in community service.