Thomas Hamzik Email & Phone Number

Support the Information Security Data Loss Prevention team by evaluating risk, monitoring DLP Incident Queues, and performing administration on DLP policies and procedures to protect corporate data and ensure compliance with Corporate Policies.• Monitor Data Loss Prevention and Insider Risk queues, escalating incidents appropriately and timely in order to detect and prevent loss of corporate data.• Create and maintain documentation regarding decisions and work performed.• Create and maintain documents, procedures and best practices for DLP Team tasks.• Monitor Identity Access Management queues for access requests submitted on DLP supported forms.• Assist in the development and reporting of team metrics, analyzing the data, and taking appropriate action on the results• Identify and analyze security risks and vulnerabilities communicating them to the appropriate parties across the organization ensuring risk mitigation and enabling risk-based business decision making. • Perform policy maintenance on Forcepoint queue policies and assist in the creation of policies for new use cases.• Perform policy maintenance for Zscaler DLP policies and assistance in the creation of policies for new use cases.

Cleveland/Akron, Ohio Area

Performed Evaluation and Assurance testing to ensure compliance with government regulations.• Test the Ethics Alert Line process to verify that any reported ethics issues are properly reviewed and escalated in accordance with Corporate Policies and Government regulations. Reported findings and shared result reports with management.• Test and evaluate the Access Control Program periodic reviews of access to find and resolve issues. Reported findings to the reviewer, the system or application owner and management.• Maintain records of necessary System and Application access for the Risk Evaluation team to ensure team members have the correct access needed to perform compliance testing and avoid delays in testing.• Applied Risk Management Compliance fundamentals to compliance testing to find and correct issues so as to keep the company compliant with laws and regulations.• Tested data for compliance to government regulations, including HMDA (Home Mortgage Disclosure Act), Flood Insurance, and Privacy Regulations. Reported findings and shared result reports with management. • Prepare the team project status report for the line of business reporting team to present to management at the monthly compliance risk committee meeting.

Cleveland/Akron, Ohio Area

Support Information Security by evaluating security risk, monitoring for security issues, and performing security administration on assigned systems and applications in order to ensure compliance with corporate policies.• Test and evaluate the Access Control Program periodic reviews of access to find and resolve issues. Reported findings to the reviewer, the system or application owner and management.• Support the Information Classification Program by maintaining program documentation and consulting on projects for the program to ensure compliance with program policies.• Designated as the Security Officer responsible for all aspects of HP NonStop and AS400 systems security ensuring compliance with corporate policies and performing as the security liaison for internal and external audits of those systems.• Perform internal security monitoring by reviewing security logs and Arcsight alerts for security issues to protect the company from internal breaches. Report issues through the incident response process for evaluation, escalation and resolution.• Provided Security Vulnerability Management using nCircle to scan systems and applications for missing patches and open services. Reported the results to management and to system owners for remediation.• Performed Websense Internet Filtering Administration as the security point of contact for blocking or unblocking websites according to corporate policies protecting the corporate network from security breaches.• Perform control testing for security and privacy controls to verify controls are working as defined and reporting issues through the risk management escalation process.• Research, gather and prepare investigation data as requested by Human Resources for the HR department to determine noncompliance of employees to corporate policies.

Associate In Specialized Business, Data Processing

Gsec, Information Security

Earned GSEC Information Security Certification January 2003 renewed 2005, 2009, 2012, 2016, 2020,and 2023. Published paper “Securing.