Seth Hunter Email & Phone Number

Austin, Tx

Manage global testing activities related to Dell's internal assessment of compliance with the Payment Card Industry Data Security StandardPerform controls testing to support Dell's internal assessment of compliance with the Payment Card Industry Data Security Standard. Includes scoping, evidence gathering, gap analysis, remediation/mitigation, management reporting, and work paper documentation and submission of Dell’s Global PCI Report on ComplianceSubject Matter Expert (SME) for all PCI related issues at Dell; assist IT and the business with developing management action plans to resolve any noted gapsCoordinate the integration of all new Dell acquisitions to ensure PCI compliance issues are remediatedAct as the single point of contact for all PCI related activities for Dell globallyInterface with Dell's independent internal audit function. Validate and track issues identified within their audits and assist IT with developing management action plans. Report progress to upper management and identify risks to meet established deadlines

Responsible for conducting and directing compliance reviews as well as handling projects in the Security Governance fieldWorked in a leadership role with other Information Security staff, as well as project managers, business department personnel and IT staffPerformed forensic preservation of sensitive information for litigations as directed by General Counsel and Records ManagementConducted information security risk assessments, reviews and project tasks, and presented final reports to managementLead Security Response Team and coordinated incident management activitiesDirected the development and presentation of information security awareness trainingInterfaced with IT and business teams to understand business needs and identify relevant security measuresActed as a subject matter expert in information security domains (firewalls, authentication, application vulnerability assessments, and encryption)Integrated business need with security controls and articulated issues to managementIdentified compliance issues in regard to FFIEC, GLBA, HIPAA, S-Ox and other state and federal regulations affecting data privacy and protectionCreated and maintained documentation for Information Security standards, processes and proceduresProvided information security consulting and advisory servicesEnsured that Information Security policy and standards are addressed in IT projectsActed in a leadership role for other Information Security Analysts and Security Engineers

Conceived and implemented the Info@Risk deliverable which assessed the following areas of information security: physical security, Internet based penetration testing, internal and external vulnerability assessments, policy auditing and enforcement, social engineering and telephony vulnerability assessmentPerformed technical security assessmentsAssessments were performed to the following industry guidelines: HIPAA, SOX, COBIT, NERC, GLB, ISO, NCUA, PCI DSS, FDIC and FFIECRecruited, managed and trained assessment staffOversaw the execution of the deliverable to a varied client base including, Financial, Healthcare, Private Industry, Public Utilities, Educational, Transportation, Government and LegalSolely responsible for communicating risk to senior management during the presentation and addressing any follow up questions from the clientUltimately responsible for the integrity and quality of the deliverableResponsible for account development; customer relationshipsAdapted deliverable based on a changing marketplace

Responsible for the information security of Bear Creek Operations Oversaw the e-commerce sites of Bear Creek Operations, including www.harryanddavid.com and www.jacksonandperkins.comAssessed information security needs of the community; implemented technologically and policy based solutions adhering to current best practices and vendor requirementsPolicy creation and enforcement in cooperation with senior managementImplemented enterprise level email management systemEnsured the inclusion of information security within all projects Managed IT Security teamLed team in security assessments of new and existing infrastructure Communicated information security risk to the officers of the company and made recommendations for remediation

Created and directed the security divisionRecruited, managed and trained staffInternal and external vulnerability assessmentsManaged the implementation of security devices, firewalls and intrusion detection systemsConceived, designed and implemented managed security service, which included real time vulnerability assessment and reportingPolicy review and creationExecutive and technical level presentationsEnterprise level product implementations and project managementPre-sales engineering

Created and directed the security divisionRecruited, managed and trained staffInternal and external vulnerability assessmentsManaged the implementation of security devices, firewalls and intrusion detection systemsConceived, designed and implemented managed security service,which included real time vulnerability assessment and reportingPolicy review and creationExecutive and technical level presentationsEnterprise level product implementations and project managementPre-sales engineering

Oversaw all network implementationsIntroduced the project management process to the IT DepartmentManaged project team

Advanced network and security administrationRouting and switching architecture, design and implementationManaged the network architect teamDesigned, deployed and managed a network management system including trending and real time alert notification using HP OpenView and Seagate Nerve Center

Computer Science

Computer Science