Managing all InfoSec, Systems, IAM, Networks, CRMs and Custom Code

Owner and operator of RJAMS Fittech, a small fitness/technology company

InfoSec and Security Operations• Authored and implemented all security operations policies.• Achieved Payment Card Industry (PCI) Level 1 Compliance in less than three months.• Built Risk Management and Anti-Money Laundering (AML) programs.• Authored reporting and monitoring system for PayFac industry compliance requirements.• Wrote employee training program and taught secure coding classes to staff, based on Open Worldwide Application Security Project (OWASP) and Secure Software Development Framework (SSDF) standards.Technical Operations• Architected, programmed, and managed all technical operations.• Cut infrastructure costs by 50% through platform selection and zero-base budgeting.• Along with the CEO, developed and evolved the strategic direction of both organizations.• Rebuilt the PayRom/Total-Apps back office and developed tools to automate accounting tasks.• Vetted and hired staff, including on and offshore developers, project manager, product manager, operations team, and quality assurance.• Moved company from Waterfall to Agile to respond to customer needs more quickly.• Automated code regression testing and deployment, saving time and reducing “bad releases” by > 80% in the first six months.• Built full-service intranet, managing customer activity, PKI/certificates, and training.

(Publicly traded global payment processor sold in 2018 to NCR)Director, Systems, and Development (2014 – 2016)Systems Manager (2012 – 2014)Sr. Systems Analyst/Admin (2010 – 2012)Systems Administrator (2006 – 2010)Jr. Systems Administrator (2004 – 2006)Customer Service Agent (2003 – 2004)• Grew with the company from start-up through IPO and merger.• Developed new operations and customer service intranet and ticketing system.• Planned and carried out an enterprise-level database version upgrade with no downtime.• At 45 transactions per second, 95% of transactions completed in < 1 second, 24x7.• Managed business continuity, backups, power pooling, and disaster recovery strategies.• Oversaw audits and compliance: CISP/PCI.0 – 3.1 SAS70/SSAE16, TG3/Pin Debit and SOX• Conducted internal white hat web application penetration testing

Oversaw all aspects of day to day operations with a focus in information and workflow between departments. Moved the company away from paperwork and filing cabinets, mapped out each department’s functions and integrated an automated version into a global framework for the company. Designed and implemented automated processes to quickly track and suspend services for non-paying customers. Reviewed and renegotiated vendor contracts to improve margins.