Sam Ok Email & Phone Number

Gainesville, Florida, United States

•Participate in working sessions to identify, plan and execute strategies in response to emerging RMF management, mitigation, statement formulation, interfacing with system Administrators to resolve open findings of high- and at-risk systems. •Develop and maintain remediation activities in coordination with the Federal Information System Security team.•Assess security risks in relation to company policy and in compliance activities. •Communicate findings or suggest compensating controls to effectively remediate security weakness. •Safeguard the organization’s information through the performance of risk assessments, influence on policy and standards and contribution to security awareness.• Drive security assessments through interviews and relationships to understand and quantify appropriate risks.•Coordinate the incoming due diligence, information security and other regulatory compliance reviews from current and prospective customers. •Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change. Review security vulnerability and compliance scans on a daily, weekly, or monthly basis to monitor the assigned environments and assets to determine compliance with the required standards.

Washington Dc-Baltimore Area

• Perform third party risk assessments on vendors and report on findings to IT management.• Assess security risks in relation to company policy and in compliance activities.• Communicate findings or suggest compensating controls to effectively remediate security weakness. • Review SOX controls and ensure they are being performed as required. • Safeguard the organization’s information through the performance of risk assessments, influence on policy and standards and contribution to security awareness.• Drive security assessments through interviews and relationships to understand and quantify appropriate risks.• Interpreting, authoring and analyzing security policies and standards.• Provide initial and on-going due diligence review on third party vendors to ensure risk are identified and applicable standards, and VCI’s policies are being followed.• Provide support with the contractual terms based on the outcome of the vendor assessment, quality of controls and company requirements including meeting with Procurement Legal, SMEs and BO to agree on VRM mitigation efforts.• Provides oversight of perpetual third-party risk management functions including ongoing management, change management, and the remediation of findings that result from risk assessments.

Dallas, Texas, United States

• Assisted in the creation and execution of the vendor management processes to optimize relationships with vendors and to deliver the best results aligned to business risk mitigation.• In charge of reviewing regulatory reports, SOC reports, certificates of insurance, and other reports associated with vendors included in the vendor program and escalate issues to the appropriate individuals.• Managed the completion of any required Remediation Plans for vendors in the Contracts, Ongoing Monitoring or Information Security sections of the vendor risk assessment.• Responsible for the management and oversight of overall vendor portfolio planning, relationship management processes, governance, compliance standards, and complete risk analysis for onsite assessments.• Ensure all vendor relationships are documented in the vendor risk management system (VRM) system and all contracts related to vendors that provided outsourced services are uploaded in the system.• Work with business departments as necessary including follow-ups to ensure all assessments are complete within specified timelines and in accordance with VRM policy and procedures. Assist the VRM Supervisor with review and analysis of final assessments.• Executes detailed reviews of third-party risk assessments to identify gaps in risk identification and inform solutions that minimize losses resulting from inadequate internal processes, systems or human errors.

Dallas County, Texas, United States

• Achieved a 60% increase in end-user satisfaction ratings through consistent delivery of excellent customer service. • Successfully managed both proactive and reactive escalations, ensuring adherence to defined processes. • Scheduled and facilitated meetings between project stakeholders to discuss deliverables, schedules, and conflicts.• Monitored project progress, identified risks, and took corrective action as needed.• Provide comprehensive desktop support services, including hardware and software troubleshooting, configuration, and maintenance.• Built strong relationships with end-users, including management, and contributing to enhanced communication. • Generated insightful weekly reports on physical inventory counts, facilitating strategic planning for hardware resources. • Collaborated with the IT team to implement network enhancements, contributing to an improvement in network performance.

Bachelor'S Degree, Biology, General

Master'S Degree, Computer Information Systems