Samuel Torchio Email & Phone Number

Seattle, Wa, Us

New York, Ny, Us

New York, Ny, Us

During a major security initiative roll-out, took charge after unexpected turnover, gained consensus across departments, and implemented an exception management process. Resulted in improved change management controls for internally developed software, aligning reality to security and compliance goals.Led the procurement process for a User Access Review tool, by re-writing the business case, conducting pilots, soliciting broad feedback, and negotiating with vendors. Saved Datadog over $200k annually and increased the revocation rate of unnecessary permissions to 5% per quarter.For an internal support tool, coordinated with multiple teams to revoke unnecessary standing access for over 2,000 users, implemented a new authorization model, and developed a training program for all users. Coordinated the development of an internal security management platform, identifying and implementing automation opportunities to enable efficient monitoring of 7 key controls and the generation of 32 populations for testing and audit evidence, supporting Datadog’s ability to scale its audit portfolio.Facilitated annual audits for ISO, SOC, PCI and TISAX compliance certifications. Coordinated with auditors and subject-matter experts to collect audit evidence and conduct walkthroughs. Provided expert support in self-serving evidence directly from CSP environments.Fostered relationships with various departments, advocated for better communication practices, and developed training programs, improving cross-organizational collaboration, enhancing the reputation of Information Security, and increasing the effectiveness of security initiatives.

London, Gb

Coordinated concurrent, high-profile projects by leading multiple teams through project execution. Projects finished on-time, under-budget, with consistent requests from clients for additional support.Conducted a Network Security Risk Assessment and current state review of Network Security Architecture Governance processes to address a regulator issued “Matter Requiring Attention” (MRA) for a major bank client. Managed a team of seven to conduct a threat model against the client’s existing network security controls to identify gaps and recommendations for enhancing controls. Expected to resolve MRA through completion of project and reduce risk across the organization’s network.

London, Gb

Established a repeatable Authentication Risk Assessment framework, leveraging NIST, MITRE and OWASP ASVS standards and frameworks to address a regulator issued MRA for client. Performed a comprehensive review of authentication security controls and policies to identify gaps in current control posture against emerging threat landscape. Established credibility to secure $8.5mm follow-on project with the client related to Network Security Architecture (ongoing).Designed and managed a program for internal, external, and web-application vulnerability scanning and management in adherence with PCI-DSS requirements for major cloud computing client. Translated requirements set forth by PCI-DSS, configured vulnerability scans, developed dashboards for engineering and executive reporting, managed remediation of non-compliant hosts, and prepared quarterly audit artifacts. Since inception of this program, client has had 2 years of successful PCI vulnerability management. Resulted in $2.4mm, multi-year managed service contract for employer.

London, Gb

Operated SOX IT General Control for the annual rotation of service account passwords on financial systems for telecommunications client. Monitored 60 applications and more than 60,000 unique accounts manually for password compliance. Coordinated directly with system administrators and account owners. Managed an offshore team of 10, maintained project financials, and onboarded peers and superiors to the project team. Contributed to two annual renewals for $2mm each for employer.Designed, developed and deployed a Robotic Process Automation (RPA) Bot proof of concept to identify service accounts within telecom client's entire SOX IT technology stack and classify accounts based on risk and SOX compliance. Reduced manual processing time by 100+ hours (~10%) per year with 0% tolerance for error.Created self-service tool using Microsoft O365, SharePoint, Excel, SQL, and VBA scripting to allow client stakeholders to receive real-time view of outstanding compliance issues across organizations. Tool used by client Directors and VPs to drive remediation of over 30,000 compliance findings.For a major retail client, provided security design and implementation of Azure service fabric cluster used to host a device-less web-app. Responsible for end-to-end deployment of cloud environment, including virtual device hardening, network security, front-end security, TrendMicro agent integration and Splunk logging.

Founder and owner of Creations of Sam Torchio, a small art business focused on the production of band related merchandise. Independently has created 22 unique enamel pins, 7 unique sticker designs, 4 unique event coins. Sam has collaborated with 3 other artists as well, creating an additional 28 enamel pins. Responsible for art, design, production, marketing, sales, shipping and accounting

New York, New York, Us

Monitored breaking news, analyzed financial reports, leveraged financial models and accounting principles, and created company watch reports to communicate recommendations to directors for use in driving engagement pursuit decisionsCoauthored pitch-book presented to Unsecured Creditors Committee to obtain Financial Advisor role during high profile bankruptcy. Included analyzing court documents, distilling SEC filings, and monitoring up to the minute news updates regarding multiple Debtor in Possession motions and a nuanced preplanned sale of the Debtor

Managed a team of 15 full-time and part-time interns. Duties included coordinating phone banks, organizing door knocks, and implementing the campaign's field plan. Included in strategic meetings regarding the campaign's progress and future plans. Performed most graphic design projects for the campaign

Ann Arbor, Mi, Us

Engaged by the School of Public Health to assist Dr. Judith Calhoun in the development of a core competency model for integration of Information Technology into advanced degree Health Administration Masters. Performed gap-analysis regarding the need for information technology professionals and the dearth of any in the field of public health. Co-authorship of final paper.

Bachelor Of Business Administration (Bba), Finance And Operations

Bachelor’S Degree, Computer Science