Robert M. Email & Phone Number

Irvine, California, United States

Irvine, California, United States

• Perform privacy and cybersecurity related risk assessments to identify vulnerable areas throughout the Bank’s security and privacy program. The risk assessment process includes identifying threats and risks, identifying technical, logical, and operational controls that are in place to mitigate the threats, and analyzing and reporting the observations found during the risk assessment process.• Support the oversight, management, and testing of the Bank’s incident response plan.• Promote security awareness throughout the Bank; provide information security training to Bank employees and customers. • Perform user access reviews on the Bank’s critical systems and applications.• Facilitate the patch management workgroup meeting to ensure the IT infrastructure team is meeting patching metrics.• Assist in the preparation of senior management and board reports, including tracking of key security and cybersecurity metrics.• Assist in the coordination of the Bank’s disaster recovery and business continuity program. This includes maintaining the plans, coordinating the Business Impact Analysis, facilitating testing, assessing vendor's resiliency, and communicating bank-wide resiliency awareness.• Assist in the development, execution, and follow-up over bank-wide social engineering testing program.• Assist in the oversight of the Bank’s physical security program, including branch security, including alarm, surveillance, and related physical security controls. • Assist in defining security controls and security baselines for products, services, or systems being implemented.• Assist in internal audit or external audits as necessary. This may include responding to audit requests, preparing documentation, or implementing corrective action.• Assist in performing vendor security reviews, and managing vendor contracts.• Keep current with emerging security standards, alerts and issues.

Santa Ana, Ca

The Application Identity Management (AIM) team is responsible for the provisioning, de-provisioning and auditing of user access working under the guidelines, policies and standards established by the Information Security Office. AIM handles the documentation of business processes, training procedures and standard operating procedures. Team members identify problems and implement solutions for multiple applications. AIM performs the onboarding of new applications providing project status/updates to stakeholders, project teams, etc. while ensuring system design and business processes meet compliance standards.Essential Functions• Focus on projects, innovation and continuous improvement• Ability to handle level III issue resolution• Facilitates meetings, discussions• Owns documentation• Drives small scale solutioning• Identifies and implements operational process improvements• Mentors within and across teams• Technical lead (SME) for projects• Handles multiple projects at the same time• Owns service process design• Develops and provides cross training• Performs complex data analysis• Contributes to policies and standards• Contributes to governance• Champions change• Conducts business process evaluations to gain technical knowledge of business requirements• Analyzes and designs access rules for business systems• Analyzes segregation of duties and applies principle of least privilege in security role design• Analyzes data files to identify SOD conflicts and policy/standard violations for the purpose of user account cleanup• Hosts various workshops with business and application development teams throughout onboarding lifecycle• Participates in audit related activities working with internal and external audit teams• Works closely with and in conjunction with offshore team resources as needed• Documents new processes and maintains existing process documentation

Santa Ana, Ca

The Information Security Engineer is responsible for assisting with the maintenance the corporate information security program to ensure the confidentiality, integrity, and availability of Orange County’s Credit Union assets. The program includes: policies, standards, guidelines, and controls to manage and prevent risk to Orange County’s Credit Union. This position is responsible for technology security reviews, application and process security reviews, vulnerability assessments, monitoring of key and compensating controls, PCI compliance, monitoring baseline configuration standards, and identifying control gaps to remediate risks and recommend/implement controls.• Leads computer forensic analysis and work with internal investigations and outside parties to product chain of custody documentation and details of analysis• Conducts and coordinates risk assessments against systems and processes to ensure appropriate controls are in place and recommend/implement controls to remediate risk findings• Documents security polices, procedures, and tests• Coordinates and leads the implementation of security tools and controls with Enterprise Technology Services and outside vendors• Performs daily operations and monitors events from multiple sources including, but not limited to, SIEM consoles, network and host based intrusion detection systems, firewall consoles, system logs (Unix and Windows), applications, databases, and other security information monitoring tools• Creates and maintains documentation for procedures and process improvement• Participates in the computer Incident Response Team in the event of an incident or disaster. Assists in maintaining the CIRP and recommends updates and changes• Develops network security baseline configuration standards for firewalls, routers, switches, load balances, and related network appliances

Irvine, Ca

Under general direction and supervision from the Manager, Information Security, I am responsible for Information Security across the Hyundai Capital America (HCA) organization, collaborating with all departments and partners to ensure information security standards, technologies and components are in place, to ensure proper safeguards of private and confidential information throughout IT infrastructure and systems. I partner with Legal, Internal Audit, and Compliance departments to understand requirements and define technology security standards and strategy to fulfill requirements in a pro-active and/or reactive matter. I participate in meetings with IT auditors (internal and/or external) as well as technology partners. I interact closely with technical teams throughout a project's lifecycle.• Assist in the Development, Maintenance, and Assurance of Security Standards, Strategy, Best Practices, and Charters based on users and regulatory/legal requirements, focusing on information security and compliance• Evaluate and Recommend Security Solutions to any given project, serving as a subject matter expert by providing recommendations from security perspective to technology solutions being developed or maintained internally or externally by partners• Conduct security assessments for projects by holding security reviews against internal or external solutions being developed or maintained; Execute periodic security assessments/audits partnering with internal or external organizations to cover: information security, infrastructure penetration tests, ethical hacking, process security assessment• Coach and Develop Security practices and skills across HCA’s organization (Security Awareness) • Lead and Manage IT Security initiatives as well as interact with other security or compliance related organizations (Audit, Compliance and Examiners)

Bachelor Of Science, Electronic Engineering, 3.5

Associate'S Degree, Electronics/Computer Science, 3.5

Diploma, Computer Technology, 3.5