Phillip Chang Email & Phone Number

Torrance, California, Us

Torrance, California, Us

Worldwide

Developed a multi year security program and grew a 5 member team addressing security risk for all of Shell Recharge Solutions, and collaborated globally with Shell security across multiple continents. Worked closely with CTO/COO to align security with business goals, and solicited sponsorship from Shells international security and audit divisions.- Responsible for Security Engineering, Architecture, Risk Management, and Compliance- Lead ISO 27001 and PCI-DSS Audits as PCI-ISA- Managed penetration testing of web, mobile, and charging station infrastructure- Developed monitoring and hardening processes for a network of 10000+ charging stations - Key contributor in IT integration of Greenlots Acquisition to Shell Global Infrastructure- Implemented Shell Control Framework and developed in house Privacy and Compliance functions to comply with GDPR requirements with Hague corporate offices

Frisco, Texas, Us

Oversaw Information Security, Governance, Risk and Compliance and IT Support departments for corporate infrastructure and distributed web services. Security- Serve as PCI-ISA, delivering annual Level 1 PCI DSS certification- Support annual SOX compliance audit- Provide security strategy and manage the information security team- Lead incident response and forensic investigation practices- Collaborate with senior leadership on IT security initiatives and compliance objectives- Architect security solutions and implement security best practices across the organization- Assist with business development engagements from a risk and security compliance perspectiveIT- Manage IT Infrastructure Initiatives and the IT Support team- Collaborate with all Boingo divisions to understand IT integration needs- Manage software licensing (enterprise and user) and hardware purchasing- Responsible for Office infrastructure, Security Cameras, RFID systems, Conference room equipment

Frisco, Texas, Us

Paris, Idf, Fr

Engineering:- Implementation of Information Security Systems at 3 offices and 48 Mall locations.- McAfee Web Security (URL Content Filtering) Implementation at all corporate offices- Mandiant FireEye HX/NX systems deployed at 48 locations and HX Agents on 3000 global systems- Integrated Cisco ISE at 3 Mall locations working with CDW as a technology partner- BYOD Email Implementation w/ Airwatch MDM including creation of BYOD policy- Managed IT Systems (Airwatch MDM, Box File Storage, Okta SSO Integration, McAfee Network Security Manager (IPS), McAfee Anti Virus, Symantec Email Spam/Malware Protection and TLS encryption, Nessus and Trustwave PCI Scanning and Reporting, Cisco ISE)Advisory Services- Performed Security Risk Assessments on potential business partners- Provided risk reporting to business teams as part of the vendor evaluation process- Evaluated IT Change Requests as part of the Change Management Board

Los Angeles, California, Us

- Architected and Implementated Security Systems across a 10,000 Employee Organization- Integrated Fortigate UTM Firewalls at Corporate and DR Data Centers- SIEM Log Management and Analysis- Administration of key Security and Network management systems, IBM Tivoli BigFix, Solarwinds NPM, Symantec Antivirus, Fortinet Fortigate, Exchange 365 and Trustwave Trustkeeper- Performed GAP analysis on enterprise management systems and business processes- Supervised IT Internship program and delegated tasks to various IT Departments as needed- Provided guidance to engineering and business units to reduce and mitigate risk with regard to Card Holder Data

- Manage a team of 5 Systems Administrators supporting 400+ Workstations- Developed internal support website for trouble ticket submission, IT Policy/Reporting, and Wiki- Kace 1000/2000 deployment w/ BOMGAR, Asset tracking, and License Compliance reporting.- BeyondTrust Power Broker Implementation: least privilege solution for engineering teams- Workstation Patching and Security Compliance Implementation: developed a monthly patching solution combining Secunia CSI for vulnerability reporting and KACE patching in use to reduce workstation vulnerabilities. Brought organization from no monthly patch procedure to complete patch compliance within a 6 month period.

Austin, Tx, Us

Windows Server AdministratorExperienced Systems Admin responsible for Server Vulnerability Patching and Maintenance, PCI/NIST/HIPPA Compliance, Virtual Server Environments, and Data Center management.VMware ESX 4.1 Implementation and AdministrationManaged 4 ESX Clustered environments (400+ servers) Upgrading existing production 2.5 and 3.5 VMWare environments to VSphere 4.1Large Scale Operating System Image Capture and Deployment. Experience managing 27 variations of Windows Server 2003 x86/64 & 2008 x64 on various hardware platforms using windows deployment services.

Small Business IT Consultant for Minneapolis/St.Paul area clients. Businesses ranging in size from 5 employees to 250. Work included Server Setup and configuration, workstation patching and maintenance, Network and Backup consultation and general technology consultation. Company later purchased by Loefler as a larger IT support network.

Master'S Degree, Mba

Ba, Information Technology