Ron Spivey Email and Phone Number

Information Security Consultant, Senior Consultant• TSYS | 2012 - 2024• Key Responsibilities:o As a primary duty, I was the owner of Application Security governance documents including standards, references and guidelines. As part of our company governance, the goal was to ensure that our development process was in strict adherence with PCI, PHI and PII compliance.o In coordination with Governance establish Secure Software Development Lifecycle and addition of security to the DEVOPS process.o In coordination with Governance/Legal establish a Secure Supply Change framework and standard. o A leader of the Security Champion program. Mentoring, training and consulting IT development personnel with the goal of them becoming a link between their team and Application Security.o Worked with another consultant to develop training material and offer certification training on the SSCP, CSSLP, CISSP and the CCSP.• Achievements:o Working with the Application Security team, developed the framework of a Security Champion model. This program took volunteers from the IT Department and offered them security training, guidance, consultation. The program grew from an initial small group to over 1,100 members.o Developed Application Security Standard and Reference, managed through the Governance approval process and published. From that point on reviewed annually and submitted enhancements as needed.o Developed library of application coding security guidelines and best practices that provided detailed guidance that enforced the Application Security Standard.o Developed DEVSECOPS framework with stages, requirements and actions by stage.o Offered certification training classes to over 2,000 employees from across the company.

Managed and architected strategic enterprise product development and enhancements. Working to implement technologies across the various platforms within the company.

Managed group responsible for corporate API layer across all major platforms. Department managed client, technical and business training as well as supporting core productions frameworks of API layer. API lay managed over 100 Billion messages annually.

As a manager within commercial services I managed a development team as we developed several innovative project. As those products came online I managed the teams that had operational control.