Thomas Hamzik Email & Phone Number

• Support the Information Security Data Loss Prevention team by evaluating risk, monitoring DLP Incident Queues, and performing administration on DLP policies and procedures to protect corporate data and ensure.
• Monitor Data Loss Prevention and Insider Risk queues, escalating incidents appropriately and timely in order to detect and prevent loss of corporate data.
• Create and maintain documentation regarding decisions and work performed.
• Create and maintain documents, procedures and best practices for DLP Team tasks.
• Monitor Identity Access Management queues for access requests submitted on DLP supported forms.
• Assist in the development and reporting of team metrics, analyzing the data, and taking appropriate action on the results

Cleveland/Akron, Ohio Area

• Performed Evaluation and Assurance testing to ensure compliance with government regulations.
• Test the Ethics Alert Line process to verify that any reported ethics issues are properly reviewed and escalated in accordance with Corporate Policies and Government regulations. Reported findings and shared result.
• Test and evaluate the Access Control Program periodic reviews of access to find and resolve issues. Reported findings to the reviewer, the system or application owner and management.
• Maintain records of necessary System and Application access for the Risk Evaluation team to ensure team members have the correct access needed to perform compliance testing and avoid delays in testing.
• Applied Risk Management Compliance fundamentals to compliance testing to find and correct issues so as to keep the company compliant with laws and regulations.
• Tested data for compliance to government regulations, including HMDA (Home Mortgage Disclosure Act), Flood Insurance, and Privacy Regulations. Reported findings and shared result reports with management.

Cleveland/Akron, Ohio Area

• Support Information Security by evaluating security risk, monitoring for security issues, and performing security administration on assigned systems and applications in order to ensure compliance with corporate policies.
• Test and evaluate the Access Control Program periodic reviews of access to find and resolve issues. Reported findings to the reviewer, the system or application owner and management.
• Support the Information Classification Program by maintaining program documentation and consulting on projects for the program to ensure compliance with program policies.
• Designated as the Security Officer responsible for all aspects of HP NonStop and AS400 systems security ensuring compliance with corporate policies and performing as the security liaison for internal and external.
• Perform internal security monitoring by reviewing security logs and Arcsight alerts for security issues to protect the company from internal breaches. Report issues through the incident response process for evaluation.
• Provided Security Vulnerability Management using nCircle to scan systems and applications for missing patches and open services. Reported the results to management and to system owners for remediation.

Associate In Specialized Business, Data Processing

Gsec, Information Security

Earned GSEC Information Security Certification January 2003 renewed 2005, 2009, 2012, 2016, 2020,and 2023. Published paper “Securing the.