Shellsea Hernandez, Pmp Email & Phone Number

Orlando, Fl, Us

Orlando, Fl, Us

Meticulously crafted company-specific Information Security Policies and Standard Operating Procedures (SOPs). These documents align with the NIST Cybersecurity Framework and are tailored to reflect White Cap’s unique processes and controls. Collaborating closely with the CISO, ensuring that existing procedures underwent a thorough review. Oversee multiple projects, ranging from smaller initiatives to substantial endeavors. Leading projects in all aspects of projects, including capacity… Show more Meticulously crafted company-specific Information Security Policies and Standard Operating Procedures (SOPs). These documents align with the NIST Cybersecurity Framework and are tailored to reflect White Cap’s unique processes and controls. Collaborating closely with the CISO, ensuring that existing procedures underwent a thorough review. Oversee multiple projects, ranging from smaller initiatives to substantial endeavors. Leading projects in all aspects of projects, including capacity planning, resource allocation, project documentation, vendor engagement, and change management. Adeptly addressed project risks, roadblocks, and obstacles. Ability to secure resources efficiently has been crucial in meeting deliverables. These projects span a wide spectrum, with budgets ranging from $120,000 to over $500,000 and resource requirements exceeding 5,000 hours.Notable project areas include:- Cyber Security Maturity Assessments: Evaluating the organization’s security maturity against standards such as CIS, NIST CSF, and NIST 800-53.- Enhancements to NIST CSF Policies & SOPs: Continuously improving and adapting security policies to meet evolving threats.- Cyber Security Tabletop Exercise: Develop and facilitate customized department specific tabletops- PCI Assessments: Ensuring compliance with Payment Card Industry Data Security Standard (PCI DSS).- IT Risk Management: Identifying and mitigating risks across the IT landscape.- Privileged Access Management: Safeguarding critical access to systems.- Identity Threat Protection: Shielding against identity-related risks.- Governance, Risk & Compliance: Orchestrating a holistic approach to risk management.- User Access Review: Regularly assessing user permissions.Skillfully managed mixed teams comprising both independent contractors and full-time employees. These teams are dedicated to various aspects of Cyber Security Assessments, IT Documentation (Policies, SOPs, Run Books), and Third Party Cyber Risk Management. Show less

Took ownership of the TPCRM process, aiming for continuous improvement. Collaborating with cross-functional teams, assessed the current state of TPCRM. By understanding existing processes and procedures, identified areas for enhancement. Streamlined the vendor risk ranking process and implementing an improved internal survey for vendor assessments. Additionally, leveraged Shadow IT to identify vendors outside the TPCRM process, ensuring comprehensive coverage.Actively contributed to the… Show more Took ownership of the TPCRM process, aiming for continuous improvement. Collaborating with cross-functional teams, assessed the current state of TPCRM. By understanding existing processes and procedures, identified areas for enhancement. Streamlined the vendor risk ranking process and implementing an improved internal survey for vendor assessments. Additionally, leveraged Shadow IT to identify vendors outside the TPCRM process, ensuring comprehensive coverage.Actively contributed to the creation of a Software Review Committee. Requirements helped shape the software review process to comply with Information Security TPCRM policy.Lead vendor research and selection for a Governance, Risk & Compliance Application. Gathered stakeholder requirements, researched potential applications for the Governance and Compliance team. Coordinated demos and conducting a cost comparison.Project-managed the implementation of AuditBoard CrossComply, a comprehensive Governance Risk and Compliance software suite. This covered areas such as User Access Review, Privileged Access Review, Policy Management, Risk Register, CIS Controls, and PCI Compliance. Show less

Oversaw the Change Management ITIL process, presenting proposed changes and metrics.Managed the accelerated implementation of SmartSheets Resource Management software.Created and maintained technical documentation, managed user access, and facilitated STAT deployments.

Spearheaded client training programs and provided technical guidance on software products.Analyzed sourcing and meeting management trends for 35 Strategic Meeting Management Clients.Sourcing Specialist

Led a project supporting the new Meeting Registration Module and created internal documentation.Maintained a high satisfaction rating while supporting clients with Meeting Management and Venue Sourcing Software.

Orlando, Fl

Created and delivered proposals for corporate, social, and fundraising events.Developed strong relationships during the planning and execution of the Arnold Palmer Invitational.