Sam Sok Email & Phone Number

Honolulu, Hi

Honolulu, Hi

• Develop and maintain data analysis processes to provide leadership with data and tools to make high-level business decisions.• Create and update dashboards to ensure executives are kept abreast of identified organizational risks.• Produce and implement budgeting and financial analysis processes, which leads to a reduction in operational spending.• Advise organizational leaders on methods to reduce operational spending.

Honolulu, Hi

• Managed compliance projects to attain SOC II certifications for multiple product offerings.• Performed readiness assessments to determine whether controls in place met FedRAMP related compliance criteria.• Developed and implemented operational controls that met required compliance criteria.• Performed monitoring to determine whether controls were continuously meeting certifications requirements.• Developed and maintained compliance roadmaps for FireEye products.

• Developed and implemented risk and compliance frameworks for Fortune 500, 1000, and Hawaii Top 100 companies.• Delivered over 3000 hours of SOX 404 and GLBA attestation engagement deliverables.• Assisted in the scoping of prospective engagements and developed proposals.• Performed IT General Control test of design and test of operating effectiveness procedures for clients operating in the banking,education, healthcare, real estate, agriculture, and shipping sectors within Hawaii and the continental U.S.• Performed security procedures implementation.• Performed monitoring over a wide variety of controls as part of a continuous monitoring program and advised in remediatingidentified issues. Developed plans to improve identified issues.• Performed over 30 independent vendor assessments over a wide variety of areas such as, policies and procedures, operationssecurity, network and host security, and data protection. Communicated issues and provided remediation solutions to vendors.• Provided organizational-wide security awareness training to inform security best practices and industry standards to education,healthcare, and retail sectors.• Managed the chain of custody process, image acquisition process, and the data analysis process for forensic examinations.• Assisted in security hardening guideline reviews for operating systems, databases, and PeopleSoft.

Los Angeles

IT Audit