Rows Data Email & Phone Number

Managing information security and data protection compliance programs at an acceptable level of risk according to the risk appetite and needs of the business.

• 

  Governance, Risk, Cyber Security, Compliance Advisor

  Long View Systems

  May 2007 - Present - Revelstoke, British Columbia, Canada

  Office of the Chief Information Security Officer#1 Value: Integrity#1 Priority: Data ProtectionCurrently: I manage 17 (seventeen) external audit certification programs year-round across North America. External Audit relationship owner for Long View. PCI DSS, SOC1 Type 2, SOC 2 Type 2; ISO27001:2013 ISMS Compliance Program OwnerPCI DSS 3.2.1 External Audit Compliance Advisor for 4 Departments. 0 Exceptions PCI DSS 3.2.1 Self Assessment Internal Auditor for 1 DepartmentSOC 1 Type 2 External Audit Compliance Advisor for 4 Departments. 0 ExceptionsSOC 2 Type 2 external Audit Compliance Advisor for 4 Departments. 0 ExceptionsISO27001:2013 ISMS External Audit Compliance Advisor for 4 Departments. 0 ExceptionsISMS Internal Auditor and coordinator to ensure objectivity and impartialityISMS owner of Non-conformity and corrective actions registerISMS owner of the IT Risk register and IT Risk Officer for communication to ERMComplete Security and Privacy Impact Assessments and Data Protection Impact Assessments for New Systems and New VendorsScoping for GDPRLevel II Secret Security Clearance obtained with OLLIS ACSO training from Public Services and Procurement Canada 2020. Specializing in Data Protection, Risk Management, Vulnerability Management, Business Continuity and Disaster Recovery Plan Advisory and Management including BCP Cyber Security and BCP Human Resource scenarios (i.e. pandemic), working with Executives and high-level Stakeholders and Emergency Management Teams. Specializing in Data Protection visualizations for Architects and RFPs for presentation in 'Lamens' terms.Specializing in Cyber Supply Chain Management and difficult interpretations including mapping PCI DSS to NIST for Critical Industrial Control Systems (ICS). Manage Corporate Vulnerability Management Program for 4 departments as per PCI DSS 3.2.1 and ISO27001:2013Review legal contracts for data protection and compliance requirements.