Steve Lundy Email & Phone Number

Global, Oo

RESPONSIBILITIES• Accountable for ensuring the implementation and regular testing of administrative, physical, and technical safeguards to protect the Firm's information from internal and external threats.• Charged with the oversight of the Firm’s Information Security Management System (ISMS), including its policies, procedures, standards, and guidelines.• Oversees the development and upkeep of the Firm’s Business Continuity Program (BCP) along with its foundational policies, procedures, standards, and guidelines.• Responsible for managing information security risks and ensuring compliance with legal, regulatory, and client-specific requirements.• Supervises the engagement of external suppliers for independent verification and testing as needed.• Manages the Firm's response to client information security audits, collaborating with partners and internal counsel to ensure audits are acknowledged and addressed professionally.• Reviews and provides feedback on information security clauses in Requests for Proposals (RFPs) and Outside Counsel Guidelines.• Oversees the security evaluations of the Firm’s key suppliers and business partners to ensure their security stance aligns with the Firm's and its clients' requirements.• Ensures consistent identification and reporting of technological vulnerabilities to IT operations for prompt resolution, and delivers status reports on IT vulnerability remediation to senior management.• Assesses and endorses new information security technologies and methods that reduce threats to the Firm's information.• Guarantees and evaluates the efficacy of security awareness training for professionals and support staff.

Global, Oo

RESPONSIBILITIES•Develops and maintains the Firm’s Information Security Management System (ISMS) and its underlying policies, procedures, standards and guidelines.•In conjunction with IT, Risk Management, and stakeholders, supports the development and maintenance of the Firm’s Business Continuity Program (BCP) and its underlying policies, procedures, standards and guidelines.•In conjunction with Risk Management, assesses information security risk and conducts functional and gap analyses to determine the extent to which key business areas and IT infrastructure comply with statutory, regulatory and client specific requirements.•Actively ensures administrative, physical and technical safeguards to protect Firm information against internal and external threats are implemented and regularly tested. Oversees engagement of external suppliers to perform independent verification and testing where appropriate.•Responds to client information security audits on behalf of the Firm’s partners and works with partners to ensure client audit requests are acknowledged and completed professionally.•Reviews and comments on information security provisions in RFPs and Outside Counsel Guidelines.•Oversees security audits of the Firm’s major suppliers and business partners to ensure supplier security posture is aligned with the business needs of the Firm and its clients.•Ensures that technology vulnerabilities are regularly identified and reported to IT operations for timely remediation, and provides reports to senior management on the status of IT vulnerability remediation efforts.•Evaluates and recommends new information security technologies and techniques that mitigate threats to Firm information.•Ensures and measures effectiveness of security awareness training programs for professionals and business support staff.

Minneapolis, Mn, Us

•Solicit Senior Leadership for ongoing information security requirements and ensure security program strategic alignment•Accountable for maintaining strategic global information security management system (ISMS) and ISO 27001 certification•Responsible for development of new and maintenance of existing information security policies and standards•Implemented consolidated audit process with harmonized audit frameworks that has decreased cost, reduced operational overhead and complexity•Defined and implemented an approved Senior Leadership Accountability Matrix based on ISO 27001 control structure•Established a Business Continuity Program including Information Security Contingency Plans to facilitate the execution of Operational DR strategy •Coordinated all elements of information Security program (Incident Management, Vulnerability Management, BCP/DR, SOC, and Audit & Compliance) to ensure effective cohesive risk management•Corporate Information Security budget

Minneapolis, Mn, Us

Responsibilities•Formalized Risk Management Process to better identify, treat, track, and report risk •Implemented corporate Information Security Management System •Developed and implemented information security policies and standards and security management practices•Established and delivered global security awareness program to 2000+ network enabled employees•Initiated and led corporate-wide Business Continuity Program •Stood up dedicated Risk Management, Governance and Compliance and Business Continuity teams

Minneapolis, Mn, Us

•Ultimate accountability for accuracy and completion of verification team processes and orders•Define, recommend, update and implement Entrust Verification Team procedures based on current industry security policies and procedures•Responsible for having (and staying current with) detailed knowledge of industry standards established by the CA/B Forum•Ensure accuracy of orders and information by conducting monthly operational reviews; document any areas for improvement •Act as the principal liaison between the Sales and ECS CRM teams for pre and post-sales support•Train, develop and mentor the Verification Team •Point of escalation for customer issues and complaints•Work with extended Verification team, ECS Support, Security Compliance Officer, Customer Relationship Managers and Sales to resolve customer account issues quickly and effectively•Directly contribute to defining, recommending and implementing process improvement and efficiencies to maximize verification operational effectiveness (e.g. improving issuance times) and improving customer satisfaction•Attend Product Development meetings for input on new product releases, customer issues and ongoing product improvements and disseminating relevant information to the Verification team•Monitor Verification activities to ensure that customer service levels are being met and making adjustments as required•Provide quantitative and qualitative metrics to Management on a monthly basis

•Extensive experience coaching corporate and private and governmental clients in development of leadership and communication skills, productivity, business plan development, goal setting, personal and corporate competency development, personal and corporate charters and vision statements•Keynote speaker and workshop facilitator•Certified as a Coaching Consultant•Developed and delivered course-ware in areas of Positive thinking, Self Image, Business and Personal Success, Goal Setting and Achieving, Leadership and Communication•Public Speaking including; events, keynotes, presentations, seminars and webinars

Espoo, Southern Finland, Fi

•Managed $30 Million Departmental Budget•Service Delivery - Managed large teams of Technology Managers, Network Engineers, System Administrators, Project Managers, Telecom Engineers, Infrastructure Architects and Administrative Personnel across North America and South America with responsibility for Network Infrastructure Service Telecom services portfolios including Voice, Mobile, Video Conferencing, Webcasting and Infrastructure•Infrastructure Support - Scope of responsibility included 15 corporate sites and 50+ remote sales offices throughout Canada Mexico, Central and South America•Program Management - Managed several infrastructure replacement initiatives introducing new leading edge network and voice equipment and technologies including VoIP and MPLS resulting in $1,000,000/yr cost reduction.•Managed Central and South American post-Lucent merger Infrastructure consolidation and replacement projects encompassing all countries in the region•Vendor Management - Responsible for Vendor Management across all platforms and regions, negotiating details such as price, content and service levels with large telecommunications manufacturers and providers•Process Engineering - Assessed existing business practices during merge of two large companies and performed business process modeling/reengineering/training in several key areas of IT and Procurement with multi country implementation•Change Management - Change management prime for Voice and Data Network Services for Canada and CALA region•Identified as top 5% and nominated for “High Potential” Leadership Training Program

Espoo, Southern Finland, Fi

•Corporate Security Officer responsible for information security and security staff in Canada region •Developed strategic plan for implementation and support of corporate information security•Created functional business operating model for information security organization•Conducted risk analysis and guidance for all IT related development•Analyzed and determined security requirements for new hardware, software and services •Developed and implemented change control and risk management process•Lead teams of consultants engaged in Business and Security process engineering•Documented business processes and performed business process modeling/reengineering•Conducted impact analysis for implementation of security recommendations and cost benefit analysis to determine most effective security solutions•Management of change and configuration process•Responsible for maintaining access controls across regional systems•Management of risk assessment process•Incident response and investigations•Coordinated and implemented security policies and procedures•Established internal policy, controls and guidelines for compliance with Sarbanes Oxley Act (SOX) and the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA).

Ca

•Managed SAP Security Development team•Managed security design and global implementation of Business Warehouse •Oversaw the development of ERP security implementation strategy with business partners, analysts and consultants •Developed change management and configuration control process for ongoing development•Defined and implemented security and application development policies•Participated on the configuration design team during SAP implementation project•Maintenance of role based access configuration•Training and security awareness for application users and SAP Developers and Analysts•Development of SAP related policies and procedures•Incident monitoring and response

Ca

•Led Identity Access Management project, implementing RBAC•Management of a team of LDAP engineers responsible for the technical support•Negotiated delegation of system access control from business system owners•Design and implementation of multiple system interfaces during migration•Designed and develop highly visible employee lookup tools and services