Steven Parker Email & Phone Number

Palm Beach Gardens, Fl, Us

Through worldwide operations spanning wholesale, retail, and franchise. TBC responds to the needs of consumers in search of total car care at more than 3,200 franchised and company-operated tire and automotive service centers under the brands NTB®, Tire Kingdom®, Big O Tires® and Midas®.CISO and HIPAA Security Officer responsible for information security, risk and compliance.Key Achievements:>Led global security operations across 3,200+ service centers in a multi-billion-dollar environment.>Reduced security incidents through enhanced risk assessment and detection protocols.>Oversaw compliance programs, including HIPAA, PCI-DSS, and GDPR compliance, ensuring alignment with corporate goals.

• EAB divested from The Advisory Board in 2017.Responsibe for information and physical security, aimed at reducing risk and protecting client data.• Lead global security team while ensuring that appropriate people, processes, and technologies are implemented in protecting the HIPAA. PII, GDPR, PCI and FERPA data and compliance requirements for over 1,400 higher educational clients. Responsible for corporate information security across all locations, business units, and applications. Lead in the development and enforcement of information security policies and procedures, measures, mechanisms, and technology to ensure the prevention, detection, containment, and correction of security incidents.• Aligning Business and Technology Strategy • Cyber Security privacy policies and Procedures • Security Operations Management • Data Center and Cloud Security Implementation and Management• Systems Design/Implementation • Security Incident Response• Vulnerability Management• Security Regulations (HIPAA/HITRUST/PCI/SOX)• Vendor/Partner Oversight• Risk Assessment and Management

• Ensuring the appropriate people, processes and technologies are implemented in protecting the HIPAA, PCI and FERPA data and compliance requirements for over 4,000 hospitals, insurance providers, and educational clients. • Developed, implemented and monitored a comprehensive enterprise information security, incident response and risk management program to ensure the integrity, confidentiality, and availability of corporate information.• Built a repeatable audit program for SOC Type 2, SOX, PCI, HiTrust and HIPAA audits.• Ensured technical, physical and administrative security controls meet legal and contractual requirements.• Ensured secure migration to cloud-based services and storage implementing administrative and logical controls into the architecture.• Drove successful efforts to automate assessments such as through promoting API usage of static assessment tools as well as automating reporting through Threadfix and Jira. • Designed and implemented a Vendor Risk Management Program utilizing NIST guidance. Ensure that supply chain risk was reduced and aligned with the overall business strategy.

Miramar, Florida, Us

Responsible for Information Security strategy and leadership. • Defined a set of measures from within the information security program inclusive of operations, risk management, policy and compliance based metrics for quarterly review. • Revamped and re-organized the cybersecurity tools and processes. • Ensured Enterprise Architecture development infrastructure aligned with business requirements for future growth including migration to virtualized environment, Biometric Authentication, Monitoring, and Compliance for over 30,000 remote Users. • Successfully led the company through consecutive HiTrust, HIPAA, PCI Level 1 audits, NIST 800-53, and FISMA reviews. • Implemented enterprise information security strategies for information asset protection, operational and governance programs that allowed Arise to comply with applicable FTC, Sarbanes-Oxley (SOX), HIPAA, FISMA, NIST, PCI-DSS Level 1 and FDIC regulations and U.S. State and European Union Privacy Laws.

Raleigh, North Carolina, Us

• Established and implemented effective enterprise-wide information security governance program that ensured the strategic alignment of information security with broader corporate goals.• Manage a team that developed, implemented and maintained security policies, standards, guidelines, and procedures. • Led the Enterprise Risk Assessment, Vendor Management, and Security Awareness programs,responsible for self-monitoring, annual GLBA testing and documented risk assessment, including the FFIEC Cyber Assessment Tool (CAT) and Annual Information Security report to the Board of Directors• Worked collaboratively with the CISO to develop the ongoing strategy aligned with business requirements and oversee the allocation of resources and budget.• Implemented enterprise information security strategies for information asset protection, operational and governance programs that allowed First Citizens to comply with applicable FFIEC, FDIC and PCI-DSS Level 1. • Collaborated with fraud team on Anti Money Laundering (AML) processes and implementation of Know Your Customer, (KYC) standards.• Ensured Security Compliance by utilizing Industry frameworks (ISO, COBIT) and automated GRC tools, including threat and vulnerability management resources, FS ISAC and FDIC guidance.

San Jose, Ca, Us

• Led protracted physical and data security engagements for financial services and government clients, ensured the highest level of client satisfaction by collaborating with pre-sales and post-sales teams.• Responsible for technical implementations, vulnerability assessments and penetration testing and performed incident response and security analysis.• Served as a Security and Enterprise Architecture, helped develop architecture plans for infrastructure protection and implementations that allow systems to achieve SOX, PCI, and HIPAA compliance.• Delivered executive briefings by educating customers across a range of technical and compliance matters, and delivering security assessments, as well as prevention and remediation solutions. • Provided on-boarding and mentoring for junior associates and peers.• Launched the PCI Compliance Practice including gap analysis, security assessments and remediation for wide range of verticals i.e. financial services, energy, and transportation.

Mesa, Az, Us

Responsible for the growth and operations of startup IT security and training company. Piloted planning and implementation of a broad range of technology and Information Security offerings, from vendor management to Enterprise risk assessment – hired and trained diverse team of technical consultants for Cisco Gold and Computer Associates Partner. Led multiple long-term IT and Information Security projects, involving planning across corporate verticals and with city and state agencies. Managed implementations and maintenance while delivering on budget.

Tokyo, Japan, Jp

Partnered closely with Legal, Internal Audit, Compliance, and Business units to align their requirements with IT plans. Served as primary point-of-contact for State and Federal Banking authorities. Provided senior-level review of suspicious activity reports, while overseeing IT audits, compliance and risk assessments, and technical training efforts. Directed implementation of IS policies/procedures.

Harvard Cybersecurity: Managing Risk In The Information Age, Applying The Three Lines Of Defense Model

Bachelor'S Degree, Criminal Justice/Police Science